Cybersecurity Awareness Month: Six Steps to Protect Yourself Against Cyberattacks

October is Cybersecurity Awareness Month, dedicated to raising awareness about sound cybersecurity practices for individuals and organizations to help protect against cybercrime. Emergency Management and Information Technology are collaborating to share safety tips for residents.  

Protect Yourself Against Cyberattacks

Cybersecurity is important for anyone who uses a smartphone, computer, email, social media, online banking, shopping sites or messaging apps. Scammers are continually adapting their methods. They may use convincing fake websites, unexpected text messages, stolen account details or artificial intelligence to imitate a familiar voice or create realistic-looking content.

The good news: These six habits can substantially reduce your risk.  

1. Spot Scams and Fake Messages

• Be cautious of urgent messages. Treat unexpected notices about undelivered packages, locked accounts, unpaid bills, jury duty, fines or family emergencies with care. 
• Do not trust a link or number just because it appears in a message. Avoid clicking links, opening attachments, scanning unfamiliar codes, or calling the number included in an unexpected text or email. 
• Verify independently. Type an organization’s official website address into your browser or call a phone number from a bill, statement, payment card or trusted directory. 
• Keep security codes private. Never share a temporary code sent to your phone or email. A legitimate company should not ask you to provide it. 
• Check VirginiaBeach.gov for verified contact information and payment policies for the City of Virginia Beach. 

2. Secure Accounts and Passwords

• Use a different password for every account. Reusing passwords allows criminals to try one stolen password across several websites. 
• Use long password phrases. A memorable phrase made from several unrelated words is usually stronger than a short password. 
• Consider a password manager. This tool can create and securely store unique passwords, so you do not have to remember each one. 
• Enable an extra sign-in check. Many services let you confirm a sign-in through an app, a code or a physical security device. Turn this on for important accounts. 
• Review account recovery details. Make sure your recovery phone number and backup email address are current and belong to you. 

3. Keep Devices and Home Internet Safe

• Turn on automatic updates for phones, computers, tablets, browsers, apps, home internet equipment and smart devices and restart when prompted to finish installing updates. 
• Download software only from official sources, such as recognized app stores and the developer’s official website. 
• Do not trust surprise pop-ups claiming that your device is infected or needs immediate repair. 
• Lock your devices with a passcode, fingerprint or facial recognition. 
• Use care on public wireless networks. Avoid entering banking or payment details on public networks when possible; cellular service may be a safer choice. 

4. Recognize Financial Fraud and Artificial Intelligence Impersonation

• Verify emergency requests directly. If a caller says a relative is in trouble and needs money, hang up and contact that person or another trusted family member using a known phone number. 
• Create a family safe word. A pre-arranged word or phrase can help confirm a true emergency. 
• Be wary of unusual payment methods. Gift cards, cryptocurrency, wire transfers, mailed cash, and some payment-app transfers are difficult to recover once sent. 
• Question promises of guaranteed profit. Be skeptical of unexpected investment offers, quick-profit schemes, and work-from-home opportunities that require upfront payments. 
• Never give unsolicited callers access to your device. Do not install software or allow remote access because of an unexpected call, text, email or pop-up message. 

5. Protect Your Privacy When Using Artificial Intelligence

• Do not enter sensitive personal information. Avoid sharing passwords, bank or credit-card details, government identification numbers, medical information, tax documents, account numbers or private legal information. 
• Be careful with photos, recordings and documents. They may contain personal details such as addresses, school information, faces, names, phone numbers or location data. 
• Review privacy settings and terms before using a new tool. Understand whether the service may store, share or use your information to improve its products. 
• Treat artificial intelligence responses as a starting point, not proof. These tools can provide incorrect, outdated or misleading information. Verify important medical, legal, financial, safety and government information with reliable sources. 
• Watch for fake artificial intelligence services. Only download applications from official stores and be cautious of websites promising free access to popular tools in exchange for personal information or payment. 
• Do not assume a voice, video or image is real. Scammers can use artificial intelligence to create convincing impersonations. Verify unexpected requests through another trusted method. 

6. What to Do If You Think You Were Scammed

• Stop communicating with the suspected scammer. Hang up, block the sender and do not send further money or information. 
• Contact your financial institution immediately if money, banking details or card information may be involved. Ask about stopping or reversing pending transactions and securing affected accounts. 
• Change passwords on affected accounts, beginning with your primary email account. Check that the extra sign-in protections are still enabled. 
• Save evidence. Keep screenshots, emails, messages, transaction receipts, usernames, website addresses and phone numbers. 
• Report the incident. Tell local law enforcement and file a report with the appropriate national fraud-reporting resource. The FBI operates the Internet Crime Complaint Center (IC3), a central hub for reporting cyber-enabled crime. Visitors can file complaints right on the website and also find alerts for the public and the industry to keep up to date on the latest schemes. 
• Ask for help. Contact a trusted family member, friend, library, consumer-protection service or local support resource. Anyone can be targeted by a scam. 

If you believe you’ve been a victim and your data has been compromised, the Federal Emergency Management Agency (FEMA) provides additional tips you can take during and after a cyberattack. Learn more about what you can do at Ready.gov/cybersecurity.

• Emergency Management
• Information Technology

The Emergency Management team promotes a comprehensive emergency management program to mitigate Virginia Beach's impacts from man-made, natural or technological disasters. Learn more at VirginiaBeach.gov/ReadyVB.

The Information Technology Department provides and supports technology solutions that enable the City to advance quality of life and public safety.