Stay safe online
Be the human firewall.
Most cyber attacks don’t break in — they trick their way in. Learn to spot the tricks, lock down your accounts and protect the people you care about. No jargon, just habits that work.
Know your enemy
Today’s most common threats
Criminals use psychology as much as technology. Here’s what to watch for.
Phishing
Fake emails and sites that steal logins or install malware.
Smishing & vishing
Scam texts and calls — often pretending to be your bank, the ATO or a delivery firm.
AI deepfakes & voice clones
Cloned voices or videos of people you trust asking for money or secrets.
Account takeover
Reused or leaked passwords let criminals into email, social and shopping accounts.
Malware & ransomware
Malicious apps and attachments that spy on you or lock your files for ransom.
QR-code scams
“Quishing” stickers placed over real codes on parking meters, posters and menus.
Shopping & investment scams
Too-good-to-be-true deals, fake stores and crypto “opportunities”.
Risky Wi-Fi
Open hotspots and fake networks that can intercept unencrypted traffic.
Spot it
6 red flags of a scam
If a message has even one of these, stop and verify through a channel you already trust.
Urgency
“Act now or your account will be closed.”
Too good to be true
Prizes, refunds or deals you didn’t expect.
Secrecy
“Don’t tell anyone about this.”
Odd payment
Gift cards, crypto or a transfer to a new account.
Asks for codes
No real company will ask for your one-time passcode.
Look-alike links
paypa1.com, amaz0n-support.net, myg0v-au.com…
Interactive
Scam or legit? Test yourself
Five real-world scenarios. How many can you spot?
Cyber hygiene
The 6 essentials that stop most attacks
Do these once and you’re ahead of most targets.
Use passkeys or a password manager
Passkeys can’t be phished. Where they aren’t available, a password manager creates a unique, long password for every site.
Turn on multi-factor authentication
Prefer an authenticator app or security key over SMS. Start with email, banking, myGov and social media.
Update everything, automatically
Enable auto-updates for your phone, computer, browser, router and apps. Most attacks exploit already-fixed bugs.
Back up with the 3-2-1 rule
3 copies, on 2 different types of storage, with 1 kept offline or off-site. Ransomware can’t hold you hostage.
Pause before you click
Urgency, fear, secrecy and unusual payment methods are red flags. Verify through a channel you already trust.
Lock your devices & accounts
Use a strong screen lock, enable Find My / Find My Device, and review app permissions every few months.
Your turn
Your 10-step security checkup
Tick them off as you go — your progress is saved on this device.
Think you’ve been hacked or scammed?
- 1
Stay calm & disconnect
If a device may be infected, take it offline (Wi-Fi off / unplug network) to stop further damage.
- 2
Secure your email first
From a clean device, change the password, enable MFA and sign out of all other sessions.
- 3
Call your bank
If money or cards are involved, use the number on the back of your card. Speed matters.
- 4
Change reused passwords
Any account sharing the compromised password needs a new, unique one.
- 5
Get identity help
In Australia, IDCARE (1800 595 160) offers free support if your identity details were stolen.
- 6
Report it
Report cybercrime at cyber.gov.au (ReportCyber) and scams to Scamwatch. Keep screenshots.
Being scammed is never your fault. Criminals are professionals — reporting quickly helps you and protects others.