How to Protect Yourself Online

The best way to protect yourself online is to make it difficult for someone to access your accounts or trick you into providing sensitive information.

Use unique passwords, turn on two-factor authentication, keep your devices updated and verify unexpected messages before clicking links, sharing information or sending money.

KOHO Virtual Card

Get Your Virtual Card: Instant Approval, Secure, Convenient

With KOHO Virtual Card, you can:

• Works with Apple, Samsung, or Google Pay
• Use it in-store and online
• No physical card needed
• Up to 2% Cash Back on groceries, transportation, food & drink

1. Use Strong, Unique Passwords

Avoid using the same password across multiple accounts.

If one website experiences a data breach and you reuse that password elsewhere, someone could try the same login information on your email, banking or social media accounts.

A strong password should be long and difficult to guess.

Avoid using obvious information such as:

• Your birthday
• Your name
• Your pet's name
• "Password"
• Simple number sequences
• The same password with minor changes

A password manager can help you create and store unique passwords without having to remember each one.

2. Turn On Two-Factor Authentication

Two-factor authentication adds another verification step when you sign in.

After entering your password, you may need to confirm your identity using:

• An authenticator app
• A security key
• A fingerprint or facial recognition
• A verification code

This can help protect your account even if someone obtains your password.

Enable it on important accounts such as your email, financial accounts and social media.

3. Be Careful With Unexpected Links

Phishing messages are designed to make you believe they came from a legitimate company, government agency or person you know.

They may claim:

• Your account has been locked
• You are owed a refund
• A payment failed
• You have an unpaid bill
• You need to verify your identity
• Someone accessed your account

Instead of clicking the link in the message, open the company's official app or type its website into your browser yourself.

4. Never Share Your Password or Verification Codes

Legitimate organizations should not need your online banking password.

You should also be cautious if someone asks for a one-time security code sent to your phone or email.

Those codes are often used to authorize:

• Logins
• Password changes
• Money transfers
• New devices

Someone asking you for the code may be trying to access your account.

5. Keep Your Devices Updated

Updates frequently include security fixes.

Keep the operating systems and apps on your:

• Phone
• Computer
• Tablet
• Smart devices

up to date.

Enable automatic updates when practical.

Using outdated software can leave known security vulnerabilities unpatched.

6. Protect Your Phone

Your phone may contain access to your banking, email, passwords and personal documents.

Protect it with:

• A strong passcode
• Fingerprint or facial recognition
• Automatic screen locking
• Find-my-device features

Only install apps from trusted sources such as the Apple App Store or Google Play.

Review app permissions as well. A simple app should not necessarily need access to your contacts, microphone, camera and location.

7. Be Careful on Public Wi-Fi

Free Wi-Fi in airports, hotels, cafés and shopping centres can be convenient, but avoid assuming every public network is secure.

Be especially careful when:

• Accessing online banking
• Entering passwords
• Making purchases
• Viewing sensitive documents

Using your mobile data connection may be safer for sensitive transactions.

A reputable VPN can also add encryption when you need to use an unfamiliar network.

8. Shop Online Carefully

Before entering your payment information, make sure you are dealing with a legitimate retailer.

Watch for:

• Misspelled website addresses
• Unrealistically low prices
• Poorly designed checkout pages
• No clear return policy
• Missing contact information
• Pressure to pay through unusual methods

A website having "https" does not guarantee that the seller is legitimate. Scam websites can also use encrypted connections.

Search for the company independently if you are unfamiliar with it.

9. Watch for Online Marketplace Scams

Be cautious when buying or selling through online marketplaces.

Common warning signs include someone who:

• Wants to move the conversation off the platform immediately
• Sends a suspicious payment link
• Claims you need to pay a fee to receive money
• Sends more money than required and asks for some back
• Refuses normal payment methods
• Creates unnecessary urgency

Do not send money back until you have independently confirmed that the original payment is legitimate.

10. Protect Your Email Account

Your email account can be particularly valuable to criminals because it is often used to reset passwords for your other accounts.

Protect it with a unique password and two-factor authentication.

Do not open unexpected attachments or sign in through links in suspicious emails.

If someone gains access to your email, they may be able to reset passwords for your financial, shopping and social media accounts.

11. Limit What You Share on Social Media

Information you post publicly can help scammers impersonate you or answer security questions.

Consider limiting information such as:

• Full birth date
• Home address
• Phone number
• Travel plans
• Workplace details
• Family information
• Financial information

Review your privacy settings periodically.

Also be cautious about accepting requests from people you do not know.

12. Monitor Your Financial Accounts

Check your bank and card transactions regularly.

Look for:

• Purchases you do not recognize
• Small test transactions
• Unexpected transfers
• New recurring charges
• Changes to account information

Transaction notifications can help you catch suspicious activity quickly.

If you see something you do not recognize, contact your financial institution immediately.

13. Be Suspicious of Urgent Requests for Money

Scammers often try to prevent you from thinking carefully.

You may be told that:

• Your taxes are overdue
• A family member is in trouble
• Your account will be closed
• You have won a prize
• You must make an immediate payment
• An investment opportunity is about to disappear

Requests for gift cards, cryptocurrency or unusual money transfers should be treated with particular caution.

Verify the situation independently before sending anything.

14. Be Careful With Personal Information

Avoid sending sensitive information when it is not necessary.

This can include:

• Social Insurance Number
• Banking information
• Credit card numbers
• Passport information
• Driver's licence
• Tax documents

Before sharing information, ask why it is needed and how it will be protected.

Do not provide personal information simply because someone already knows your name, email address or other details about you.

15. Use Different Contact Methods to Verify Requests

If you receive an unusual email from your employer, bank, friend or family member asking for money or information, confirm it another way.

For example, call them using a phone number you already know rather than replying to the message.

This is especially important when someone suddenly sends:

• New banking details
• Wire transfer instructions
• Password reset requests
• Requests to purchase gift cards
• Urgent payment instructions

An email account can be compromised even when the message looks completely legitimate.

What Should You Do if You Think You've Been Hacked?

Act quickly.

Depending on what happened:

1. Change the compromised password.
2. Change the same password anywhere else you reused it.
3. Turn on two-factor authentication.
4. Contact your financial institution if banking or card information was exposed.
5. Lock or replace compromised cards.
6. Review recent transactions.
7. Check your email for password-reset notices you did not request.
8. Scan your device for malicious software.
9. Review your credit reports if identity information was stolen.

If money or personal information was lost through fraud, you can also report the incident to the Canadian Anti-Fraud Centre and local police when appropriate.

What Is the Most Important Thing You Can Do to Stay Safe Online?

There is no single security tool that prevents every scam.

The strongest protection comes from combining several habits:

• Use unique passwords
• Enable two-factor authentication
• Keep software updated
• Verify unexpected requests
• Avoid suspicious links
• Monitor your accounts
• Limit the personal information you share

Most online scams rely on getting you to act before you have time to verify what is happening. Slowing down and confirming who you are dealing with can prevent many common forms of online fraud.