Previously, we've talked about how to identify scammers from their e-mails. However, sometimes they are just too good or we just don't spend enough attention while looking at our e-mails and we click on dangerous links. Besides that, the Internet is FULL OF dangerous links and ads that will also lead you to harmful websites. Here are a few things to keep in mind whenever you're surfing the web so that you and your computer do not get exposed to attacks from hackers and scammers!
#1 Always Check the Address Bar
Today, scammers and hackers are getting better and better as they manage to replicate entire websites to look exact like the real thing. However, there are some limitations to what they can do. For example, a web address (URL) is unique, meaning there can only be 1 of each website, so always check that you are at the URL and not just accept any webpage shown too you, no matter how real it seems. To trick you even further, scammers will try to use URLs that are very similar to the real website so be sure to keep your eyes open!
REAL: facebook.com
FAKE: faceb00k.com
*swapping words/alphabets with numbers
REAL: cimbclicks.com.my
FAKE: cimbclick.com.my
*change spelling of real URL
REAL: maybank2u.com.my
FAKE: maybank2you.com.my
*using/not using short forms
#2 Look for the Lock!
The 2nd step brings us back to the address bar, but this time on the left end of it. First of all, a healthy, safe, and modern website usually starts with "https://" instead of "http://". This means they are using a safer Internet protocol. You can also tell that’s the case by looking further left for a lock icon. To ensure the website has proper certification, you can even click on the lock for more details.
This is particularly important on websites that are managed by large companies and websites where you'll input sensitive information. These include:
- Social Media (Facebook, Instagram, Twitter etc.)
- Banking (CIMBClicks, Maybank2u, PBeOnline etc.)
- Mail (Gmail, Outlook etc.)
#3 Check Your Passphrase
This is specifically for online banking websites and some government services websites. Besides the regular user ID and password, these websites will ask you to check a specific passphrase or image set by you before logging in. The passphrase is saved by the company so in the event whereby you accidentally entered a fake banking website that looks exactly the same as the real thing, the bad guys will still not be able to come up with your passphrase or image.
So, there you have it. Make it a habit to check each of these details before entering any sensitive information or logging into your account at ANY websites. For absolute protection, make sure to practice some safe online practices and create secure passwords too!
