Register your credit card for added protection from fraudulent purchases. Many major credit card companies now offer advanced purchase protection processes, such as MasterCard’s SecureCode and Verified by Visa, for all online transactions when using their cards. This added layer of protection requires the cardholder to enter a pre-registered personal identification number (PIN) only the customers would know, at time of purchase. This PIN number should never be shared with anyone.
Avoid using public Internet cafes to conduct online transactions. Kiosk workstations may contain malicious code, such as keystroke loggers, to capture your username and password, and other sensitive personal information.
Access wireless access points with strong security and built-in controls such as Wi-Fi Protected Access (WPA). These controls ensure that sensitive data, including passwords, are encrypted on the wireless network you are surfing.
Look for “seal of approval” icons, and read the company’s privacy policy. Seals of approval provided by different authorities, such as Verisign(TM) and WebTrust(TM), serve to verify that the web site adheres to their stated privacy and/or security policies. If you have any questions or concerns about its validity, consider contacting the retailer directly by phone to clarify that the site is adequately protected.
If you suspect that your identity has been compromised notify your financial institution and request that the credit bureau (Equifax/TransUnion) attach a fraud alert to your file. A fraud alert is a “red flag” on your credit report which will identify you as a potential fraud victim to credit grantors.
Update the latest operating system patches, firewall, anti-virus and anti-spyware software on your computer regularly and check that they are running. Set your computer to automatically scan for and detect any malicious programs (Trojan horses, spyware) planted by hackers wanting you to disclose sensitive information or to misdirect you to a fraudulent web site.
Verify that your browser has the latest security upgrades (also known as patches) and that it supports 128-bit encryption. This high encryption level helps to prevent sensitive data from being accessed by unauthorized people while transacting online. Consider upgrading the web browser to the latest version, as it provides a better security level and tools.
Avoid opting for the “remember password and username” option. Despite its convenience, your information will be stored for any and all future users to access. On a public computer, avoid this option altogether.
Disregard emails requesting that you log in to a shopping/financial web site, in order to update account information. Never click on web site addresses sent via email. Unscrupulous individuals who attempt to steal your personal data often use this technique, known as “phishing”, to lure customers to bogus, look-alike web sites designed specifically to collect as much of your personal information as possible.
Never send your financial information, including credit card, chequing account or social insurance numbers, via email. If you initiate a transaction and want to provide your financial information through an organization’s web site, look for indicators that the site is secure, such as a lock icon on the browser’s status bar or a URL for a web site that begins with “https:” (the “s” stands for secure). Fraud is ever-more sophisticated, so vigilance here is key.
Source: Deloitte Press Release, November 26, 2009
Recent Comments