Information Security Awareness Newsletter – December 2014

For starters, if an online offer seems “too good to be true,” it probably is. Don’t be misled by the “lure” of great discounts – the security of your personal information is what’s most important.

Being careful online will help you avoid becoming the next cyber-crime victim – the cost of which could far exceed any savings you might realize by shopping at an unreliable website.

1. Secure your computer and mobile device. Keep all of your devices updated and patched. Confirm that your anti-virus, anti-spyware and firewall programs are running and receiving automatic updates.
2. Shop with trusted merchants. Limit your online shopping to merchants you know and trust. If you have questions about a merchant, check with the Better Business Bureau. Confirm the online seller’s physical address and phone before making an online purchase with them.
3. Secure your online transactions. When sending your credit card information through a merchant’s website, be sure that the “lock” icon and “https” appear in your browser’s URL window as follows:

   

   This indicates that your session is encrypted and cannot be easily read by an intruder.

4. Use strong passwords. If you need to create an account with an online merchant, be sure to use a strong password. A strong password contains a mix of numbers, special characters (e.g., ! @ # $ % ^ & * +) and upper/lower case letters. Avoid using the same passwords for online shopping websites that you use for any other account and use separate passwords for each site. Never share your password and never send it through email.
5. Guard your personal information carefully. Never send your financial information or personal information over email or text message. Always think before you click on attachments in unsolicited emails you receive. When in doubt, contact the sender to verify the message.
6. Do not use public computers to conduct sensitive transactions. Public computers may contain malicious software that captures your credit card information when you place your order.
7. Ignore pop-up messages. If you get an email or pop-up message that asks for your financial information while you’re browsing, don’t reply or follow the link. Legitimate companies will not ask for financial information in a pop-up message.
8. Pay by credit card rather than debit card. Credit cards are protected by the Fair Credit Billing Act and may reduce your liability if your information is used improperly.

   Also find out if your credit card company offers virtual credit card numbers (temporary aliases for your real credit card number that typically allow you to specify a credit limit and expiration date). With a virtual credit card number, your actual credit card number is never revealed and the virtual number may be limited to a single merchant. Options will vary depending on your credit card issuer.

9. Keep a record. Save records of your online transactions, including the product description and price, the online receipt, and the emails you send and receive from the seller. Carefully review your credit card statements as soon as you receive them to confirm that all charges are legitimate. Contact your credit card company immediately if you have unauthorized charges on your account.