Awareness

Recognize the signs. Choose your next step.

These examples explain common threats and ways to reduce risk. They are general guidance, not a diagnosis of your device or account.

Four situations worth understanding.

Phishing

A message or website pretends to be a trusted organization to obtain your login, payment details, or an access code.

Example

A message says your email password expires today. Its sign-in link opens a lookalike page rather than your provider's website.

Warning signs

Pressure to act immediately
An unfamiliar destination or unexpected attachment
Requests for passwords, payment details, or one-time codes

First steps to consider

Open the official website yourself instead of following the link.
Verify unexpected requests using contact details you already trust.
If you shared a password, change it through the official service from a trusted device.

Data leaks

Information from an account or organization is exposed outside its intended environment. Reused passwords can put other accounts at risk.

Example

A password from an old shopping account is exposed. An attacker tries the same password against your email account.

Warning signs

A breach notice from a service you use
Unexpected login or password-reset notifications
The same password used across important accounts

First steps to consider

Use a different password for each account, especially your email.
Enable multi-factor authentication where supported.
Review recovery details and active sessions through the official service.

Malware

Harmful software can misuse a device, access information, or interfere with your files. Unusual behavior alone does not prove an infection.

Example

An unofficial software update installs an unfamiliar program and changes your browser settings.

Warning signs

Unfamiliar programs or browser changes
Repeated security warnings after a download
Unexpected activity that needs investigation

First steps to consider

Avoid using the affected device for sensitive accounts.
Use a trusted device to secure accounts that may have been exposed.
Record what changed and seek support before taking actions that could destroy important evidence.

Account compromise

Someone gains access to an account and may change recovery settings, send messages, or misuse your identity.

Example

Contacts receive payment requests from your social profile, while you receive alerts about a login you do not recognize.

Warning signs

Recovery settings changed without your approval
Messages or activity you did not authorize
A password no longer works or unfamiliar sessions appear

First steps to consider

Use the platform's official account recovery process.
Change reused passwords from a trusted device.
Review active sessions, connected apps, and email forwarding rules.

Everyday habits

Reduce avoidable exposure.

Protect your email first

Use a unique password and multi-factor authentication. Email often controls recovery for your other accounts.

Verify urgent requests

Confirm unexpected payment or access requests through a trusted contact channel.

Keep software updated

Use official update channels for your operating system, browser, and apps.

Keep usable backups

Keep copies of important files separate from your main device and check that you can restore them.

For additional guidance, visit CISA's Secure Our World resources (external) .

Something already looks suspicious?

Use the enquiry form to describe it without sharing passwords or access codes. If money is at risk, contact your bank and the relevant authorities directly.

Discuss your concern