Cybersecurity Awareness Month: How to Stay Two Steps Ahead

Scams don’t always look obvious anymore. The spelling is clean, the logo is right, and the voice on the phone might sound like someone you love.

October is Cybersecurity Awareness Month, a good excuse to slow down and check the habits that keep your home and your business safe.

Check Before You Click

A glance at an email used to be enough to catch a scam, with misspelled words, funny email addresses, and incorrect logos. Not anymore. Email scams are more sophisticated, and now it takes an actual read and asking whether something’s rushing you to act before you’ve had time to think.

At Home:

  • Check the full email address or phone number, not the name attached to it. If you’re not sure a call or email is real, hang up and call the person directly, or start a new email to an address you already trust.
  • Don’t scan a QR code from a message, flyer, or package you weren’t expecting. The FBI has warned about scam packages that show up with a QR code inside, counting on you being curious enough to scan it.
  • If a caller, text, or email message claims to be your bank, open your banking app or type the web address yourself instead of tapping/typing a link they give you.

At Work

  • Before paying a new or unfamiliar invoice, confirm the company is real. Any request to change bank details is a reason to call first using a number from your own records, never the one in the new message.

Two Steps to Better Security

A password used to be enough to keep your accounts secure. It isn’t anymore, and most accounts now offer at least one more layer of security for free.

At Home

  • Turn on two-factor authentication for your email and your bank accounts first. Those two unlock everything else.
  • Then, turn it on for every other account tied to personal identifying information or your payment methods.
  • Never read a sign-in code out loud to someone who called you. That call is the scam. Hang up and report it.

At Work

  • Give every employee their own login instead of sharing one account. That keeps the business protected if one account is compromised or someone leaves.
  • Write down every door, gate, alarm, and lockbox that uses an access code, not the codes themselves. If an employee leaves on bad terms, you’ll know what to change.

Hearing Isn’t Believing Anymore

AI has made scammers more convincing, with the Federal Trade Commission warning that a voice can be cloned with AI from a short clip of audio, and a face can be faked on a video call. Hang up and call your loved one directly to verify the person before you react to the story.

At Home

  • Hang up and call back on a number you already have saved, not the one the caller gives you.
  • Agree on a family code word and ask for it any time a call involves money or an emergency.
  • No real agency or business asks to be paid in gift cards. Wire transfers and cryptocurrency work the same way. If someone says that’s the only way to pay, that’s a scam in the works.

At Work

  • Don’t send a payment based on one phone call, no matter who it sounds like.
  • Have a second person confirm it, in person or by calling a number already in your records.
  • Post the rule somewhere your team can see it on every phone.

Update Now for Safety Later

Updates close doors criminals already know how to open. Back up anything you couldn’t stand to lose before you install an update.

At Home

  • Turn on automatic updates for your phone, computer, and TV, including firmware on connected devices like your router and smart speakers.
  • Change the default password on your router, cameras, and smart doorbell.
  • Real updates come from your device settings, never from a pop-up warning that you’re already infected.
  • If you lease your router from DFN, this part is already handled. We push automatic updates to our routers, so the device your whole house depends on stays current without you thinking about it.

At Work

  • Keep registers and office computers updated. Those are the machines criminals scan for first.
  • Back up your documents automatically, then restore one file to prove the backup works.
  • The FTC Recommends putting customer WiFi on a separate network from the one that runs your business.

Protection That Starts at the Router

You’ve now covered your logins, your clicks, and your calls. There’s one more layer you don’t have to manage yourself.

When your Wi-Fi comes from DFN, protection can work at the router, covering every device in the house, including the ones that can’t protect themselves. Your smart TV can’t run antivirus, and neither can your doorbell camera. With Managed WiFi, they’re still covered, because the protection sits between them and the internet.

None of this takes long, and none of it asks you to become a different kind of person online. Check the sender, double up on your logins, verify the voice, and keep your software current. That’s what staying two steps ahead looks like, this month and every month after it.