Don't Let Hackers Crash the Cookout

A technology expert recently told the story of losing a large sum of money after receiving what looked and sounded like a legitimate call from his bank.

The caller knew enough to sound believable. The caller had “security codes” that made it seem even more so. By the time the victim realized what had happened, the codes he thought were protecting his account had helped authorize the theft.

Security professionals say many of us misunderstand a key part of online theft: modern scammers are often not trying to “hack” a computer in the movie-version sense but instead hack a moment when we are busy, tired, traveling, rushed, worried, or trying to be helpful.

Independence Day is a good time to declare a little online independence of our own: a conversation with family and friends about online security.

“Most people think I need to be brilliant. I don’t. I need you to be busy.”

The scammer just needs you to click the link, share a code, approve a transaction, open an attachment, request you move money, or buy gift cards.

The new tricks are better because scammers may use information from social media, public records, data breaches, old passwords, or artificial intelligence to make messages sound more natural. They can spoof phone numbers and imitate banks, delivery companies, government agencies, tech support, investment platforms, charities, and even family or other people you know.

Experts advise that the most dangerous scams often have three ingredients: urgency, authority, and pressure or secrecy.

The first steps to take today:

1. Turn on multifactor authentication

Multifactor authentication means your password alone is not enough to get into an account. You may also need an app, text code, physical security key, or device approval.

Start with your most important accounts: email, bank, investment accounts, credit cards, phone provider, and primary shopping accounts.

Your email account may be the most important of all. If someone controls your email, they may be able to reset passwords everywhere else.

2. Use a password manager

A password manager helps you use long, unique passwords without trying to remember all of them.

3. Create a household “pause rule”

This is a simple and effective defense. If a message, call, or email creates fear, stop. Hang up. Do not click. Do not reply. Do not use the phone number or link they provided.

Instead, contact the company using a trusted source: the number on the back of your card, the company’s official website, or an app you opened yourself.

A good family rule is this: No one moves money, shares a code, buys gift cards, or gives remote computer access because of an unexpected call or message.

Where to report or learn more

Good public resources include the Federal Trade Commission, the FBI Internet Crime Complaint Center, CISA’s “Secure Our World” guidance, and your bank or credit card company’s fraud department.