Online Security: Tips & Tricks to Protect Yourself
Online security is more important than ever. Whether you are shopping online, applying for a loan, checking your bank account, using social media or simply browsing the internet, criminals are constantly looking for ways to steal money, passwords and personal information.
STOP: If You Have Already Lost Money to a Scam
If money has left your bank account because of a scam, stop reading this guide and contact your bank immediately if you have not already done so.
Do not wait to see whether the situation resolves itself. The sooner you contact your bank, the sooner it may be able to protect your account, investigate the payment and take action where possible.
Use your bank’s official app, the number on the back of your card, or call 159 to be securely connected to your UK bank. Never use a telephone number supplied by the person who contacted you or a link they sent you.
Major UK bank fraud numbers
These numbers are provided for convenience. Always check your bank’s official website if you are unsure, as telephone numbers can change.
- Barclays: 0345 050 4585
- Halifax: 0800 500 3914 for online banking fraud; 0800 015 1515 for debit or credit card fraud
- HSBC: 03455 873523 for scams involving authorised payments
- Lloyds Bank: 0800 917 7017 for Internet Banking fraud
- NatWest: 0345 989 0002 to report a scam
- Nationwide: 0800 055 66 22
- Santander: 0330 9 123 123
- TSB: 0800 096 8669 for non-card scams and bank-transfer fraud
Not sure which number to use? Call 159. This service can connect you securely to your UK bank.
After contacting your bank, you should also report the fraud to the police by calling 101 or online via Report Fraud.
The good news is that there are simple steps you can take to protect yourself. In this online security guide from Cashfloat, we’ll explain how to stay safe online, spot common scams and protect your money and personal information.
From online shopping and banking to romance scams and phishing emails, these practical tips can help you avoid becoming a victim of online fraud.
Feel free to continue reading or choose a section that interests you most:
- Staying safe when shopping online
- Staying safe when applying for a loan online
- Keeping your credit cards safe
- Avoiding online scams and spam
- Romance scams and dating fraud
- What to do if you have been scammed
- Online Security FAQs
Staying Safe When Shopping Online
Online shopping makes it easy to compare prices, find bargains and buy almost anything from the comfort of your home. Unfortunately, criminals also use fake websites, misleading adverts and phishing messages to trick shoppers into handing over money or personal information.
Here are some important tips to help you stay safe when shopping online:
- Check that the website is genuine. Don’t assume that a professional-looking website is legitimate. Search for reviews from trusted sources and check the website address carefully. Scammers can copy the design, logos and products of genuine retailers and use addresses that look almost identical to the real website.
- Don’t rely on the padlock alone. A website using https:// means that the connection between your browser and the website is encrypted. However, it does not prove that the website itself is genuine. Always check who you are dealing with before entering payment details.
- Be suspicious of bargains that seem too good to be true. Extremely cheap prices, limited-time offers and pressure to buy immediately can all be warning signs. Take a few minutes to research the seller before making a payment.
- Use a credit card where appropriate. A credit card can provide additional protection for some purchases. You can also consider using a trusted payment service such as PayPal, Apple Pay or Google Pay. Check the provider’s terms to understand what protection is available.
- Avoid paying by direct bank transfer. For online shopping, use a payment method that provides appropriate protection rather than transferring money directly to an unknown seller.
- Only provide the information you need to complete your purchase. Be cautious if a website asks for unnecessary personal or financial information. If you do create an account, use a unique password and avoid storing your payment details unless you are comfortable doing so.
- Be careful with links in emails and text messages. If you receive an unexpected message about a special offer or a delivery, don’t click the link. Go directly to the retailer’s official website instead.
Staying Safe When Applying for a Loan Online
When you apply for a loan online, you are sharing personal and financial information with a company. Before submitting an application, make sure you know who you are dealing with and understand the terms of the loan.
There are several things you can check to help protect yourself from fake lenders and loan scams.
10 things to check when applying for a loan online:
- Check the company is legitimate. Look for clear information about the business, including its registered name, address and contact details.
- Check the FCA Register. If the company claims to be authorised or regulated by the Financial Conduct Authority, check its details on the FCA Register. Make sure the contact details you are using match those shown on the register.
- Look for clear information. A legitimate lender should clearly explain the loan, interest rate, fees, repayment terms and other important conditions. Be wary of vague or confusing information.
- Be cautious about upfront fees. Be particularly careful if someone asks you to pay a fee before receiving a loan, especially if the request comes unexpectedly or through an email, text or social media message.
- Check the website address. Scammers can create websites that look almost identical to genuine financial businesses. Check the URL carefully and don’t rely solely on how professional the website looks.
- Don’t give away your banking security details. Never share your PIN, passwords or one-time security codes with someone who contacts you unexpectedly. A genuine organisation should not ask you to disclose these details.
- Be suspicious of guarantees. No legitimate lender should promise that everyone will be approved regardless of their circumstances. If an offer sounds unrealistic, take a step back and investigate it.
- Be careful with loan offers by email or text. If you receive an unexpected loan offer, don’t click the link in the message. If you are genuinely interested, find the lender’s official website independently.
- Understand whether you are dealing with a lender or broker. Make sure you understand who is handling your application and what will happen to the information you provide.
- Don’t rush. Scammers often create urgency and pressure people into making quick decisions. Take the time to check the company and read the terms before providing your information.
Keeping Your Credit Cards Safe
Credit card fraud remains an ongoing threat. Criminals may steal card details through fake websites, phishing messages, compromised accounts or other forms of fraud.
There are several simple steps you can take to reduce the risk of fraudulent transactions.
6 Tips for Keeping Your Cards Safe
These tips apply to both debit and credit cards:
- Keep your PIN private. Memorise your PIN and never write it on your card or share it with anyone.
- Shield your PIN. When using an ATM or card machine, cover the keypad while entering your PIN and be aware of anyone standing unusually close to you.
- Keep receipts and statements secure. Destroy old documents containing card or account details rather than simply throwing them away.
- Keep your card in sight. When paying in person, make sure your card is returned to you and be cautious if someone takes it out of your sight.
- Know how to contact your bank. Keep your bank’s official contact details somewhere safe so you can report a lost or stolen card quickly.
- Check your statements regularly. Look for transactions you don’t recognise and contact your bank immediately if something looks suspicious.
Things to Look Out for on Your Credit Card Statement
The most important thing is to check that every transaction is one you recognise. Sometimes a transaction may appear under a different name from the shop you visited because the retailer is part of a larger company.
If you see a transaction you do not recognise, contact your bank or card provider as soon as possible. Use the official contact details shown on your card, statement or the bank’s website.
Avoiding Online Scams and Spam
Online scams can arrive by email, text message, phone call, social media, dating apps or fake websites. Some scams are obvious, while others are carefully designed to look genuine.
Here are some of the most important ways to protect yourself:
- Protect your personal information. Be cautious about sharing your address, date of birth, banking details, identity documents and other personal information online.
- Be careful with unexpected messages. Don’t automatically trust an email, text or phone call simply because it appears to come from a bank, company or person you recognise.
- Use strong and unique passwords. Don’t reuse the same password across important accounts. A password manager can help you create and store unique passwords. Where available, consider using a passkey.
- Turn on 2-step verification. Two-step verification, also known as 2FA or MFA, provides an additional layer of protection even if someone discovers your password.
- Keep your devices and apps updated. Install software and security updates as soon as they become available. Turn on automatic updates where possible.
- Be careful on public Wi-Fi. Avoid accessing sensitive accounts or carrying out financial transactions on unfamiliar or unsecured networks.
- Don’t let scammers rush you. If someone tells you that you must act immediately, stop and take time to check whether the request is genuine.
Romance Scams and Dating Fraud
Romance scams, also known as dating fraud, happen when criminals create fake online identities and build emotional relationships with victims in order to gain their trust and eventually exploit them financially.
These scams can happen through dating websites and apps, social media, messaging platforms and other online communities.
A romance scam may develop over weeks or even months. The person may appear caring, attentive and genuinely interested in you. They may regularly message you, tell you that they have strong feelings for you and create a detailed story about their life.
The aim is to make the relationship feel real before they ask for money, personal information or another form of help.
Romance fraud can be particularly difficult to recognise because the scammer is exploiting emotions and trust rather than simply sending an obviously suspicious message.
Warning Signs of a Romance Scam
Be particularly cautious if someone you meet online:
- Cannot or will not video call. They repeatedly make excuses for why they cannot have a live video conversation, even after you have been speaking for some time. They may say their job, location, security arrangements or other circumstances prevent them from speaking normally.
- Claims to be in the military, UN or working overseas. This can be used as an excuse for why they cannot meet, video call or access their money normally.
- Moves the relationship forward very quickly. Be cautious if someone you have only recently met starts declaring strong feelings, discussing marriage or talking about a future together very quickly.
- Tries to isolate you. A scammer may discourage you from talking to friends or family about the relationship or make you feel that other people do not understand you.
- Says you are the only person they can trust. This can make you feel personally responsible for their wellbeing and make it harder to question their story.
- Uses emotional pressure. They may become upset, angry or threatening when you question their story or refuse to help.
- Always has a reason why you cannot meet. There may be repeated excuses involving work, travel, illness, military duties or family emergencies.
- Asks for money or financial help. This could be for travel, medical bills, accommodation, debts, customs charges, legal fees, investments or another supposedly urgent expense.
- Makes promises that seem too good to be true. Be cautious about promises of easy money, guaranteed investments, valuable gifts, inheritances or business opportunities.
- Asks you to keep the relationship or money requests secret. Be particularly cautious if they tell you not to discuss the relationship with friends or family.
- Provides lots of personal information but avoids verification. Photographs, documents and detailed stories do not prove that someone is who they claim to be. Scammers can use stolen photographs and information from real people.
- Changes phone numbers or asks you to delete conversations. This can make it harder for you to keep track of what has been said and can remove evidence that could help identify the scam.
How to Protect Yourself from Romance Fraud
- Take your time. Don’t allow someone you have only met online to pressure you into making quick decisions.
- Verify who they are. Don’t rely solely on photographs, documents or information they send you. Consider checking information they have given you independently.
- Talk to someone you trust. A friend or family member may notice warning signs that are difficult to see when you are emotionally involved.
- Never send money. No matter how convincing the story sounds, don’t send money, cryptocurrency, gift cards or valuable goods to someone you have not met face-to-face.
- Never let someone you met online use your bank account. Don’t receive or transfer money on their behalf. You could unknowingly become involved in money laundering or another type of fraud.
- Protect your personal information. Avoid sharing your address, banking information, passwords, identity documents or other sensitive information with someone you have only met online.
If something does not feel right, take a step back. You do not need to prove that someone is a scammer before protecting yourself. It is better to pause, verify the person’s identity and speak to someone you trust.
What Should You Do If You Have Been Scammed Online?
If you have already sent money or personal information to a scammer, don’t panic and don’t be embarrassed. Scammers are deliberately skilled at creating convincing stories and manipulating people.
Acting quickly can help limit further losses and may improve your chances of recovering money.
1. Stop Communicating with the Scammer
Do not send any more money, personal information, photographs or documents. Be particularly cautious if the person threatens you, promises to repay you or says that you need to make one final payment before everything can be resolved.
2. Contact Your Bank Immediately
If you have transferred money or provided your banking or card details, contact your bank or payment provider as soon as possible using an official phone number or the number on the back of your card.
You can also call 159 to securely connect to your UK bank.
Explain clearly that you believe you have been the victim of fraud. Don’t wait to see whether the scammer will return the money.
3. Change Your Passwords
If you have shared a password or believe someone may have gained access to one of your accounts, change it immediately.
Change any other accounts that use the same password. Use strong, unique passwords and turn on two-step verification where available. If the service offers passkeys, consider using one instead of a password.
4. Secure Any Hacked Accounts
If someone has gained access to your email, social media or another online account, follow the provider’s official account recovery process.
Check your security settings, email forwarding rules and recent activity. Log out of other devices and apps where possible, and warn your contacts if messages may have been sent from your compromised account.
5. Keep the Evidence
Do not delete messages, emails, photographs, payment confirmations or other evidence before you have saved copies.
Keep records of usernames, telephone numbers, email addresses, bank details, websites and the dates and amounts of any payments.
6. Report the Fraud
If you are in England, Wales or Northern Ireland, you can report fraud and cybercrime to the UK’s national reporting service, Report Fraud.
If you are in Scotland, fraud and cybercrime should be reported to Police Scotland on 101.
If you are in immediate danger or there is an immediate risk of harm, call 999.
7. Report Suspicious Messages
If you receive a suspicious text message, you can forward it to 7726 for free. Suspicious emails can be forwarded to the NCSC’s Suspicious Email Reporting Service at report@phishing.gov.uk.
8. Watch Out for Recovery Scams
After losing money, you may be contacted by someone claiming that they can recover it for you. They may pretend to be from the police, a bank, a government organisation or a specialist recovery company and ask for an upfront payment.
This can be another scam. Be very cautious about anyone who contacts you unexpectedly and promises to recover your money.
9. Don’t Be Embarrassed to Ask for Help
Anyone can become a victim of fraud. Scammers deliberately use manipulation and deception to gain trust, and falling for a scam does not mean that you were foolish.
Speaking to someone you trust can help you take practical steps and avoid further losses.
Online Security FAQs
Online security is the practice of protecting your accounts, devices, personal information and money when using the internet. This includes using strong and unique passwords, enabling two-step verification, keeping software updated and knowing how to recognise scams and suspicious messages.
Don’t rely on the padlock or HTTPS alone. Research the company, check reviews from trusted sources and look carefully at the website address. If you arrived at the website through an unexpected email or text message, consider going directly to the organisation’s official website instead.
Use a reputable password manager to create and store strong, unique passwords. You should never reuse the same password across important accounts. Where available, consider using a passkey, which the National Cyber Security Centre recommends as a first-choice login method.
Yes. Two-step verification, also known as 2FA or MFA, adds an additional layer of protection to your accounts. It can help prevent criminals from accessing an account even if they have discovered your password.
If you have fallen victim to an online scam, act quickly:
- Stop communicating with the scammer and do not send any more money.
- Contact your bank or payment provider immediately.
- Call 159 if you need to be securely connected to your UK bank.
- Change any passwords that may have been compromised.
- Save messages, emails, payment records and other evidence.
- Report the fraud to Report Fraud.
- Watch out for anyone offering to recover your money for an upfront fee.
If you are in England, Wales or Northern Ireland, you can report fraud online through Report Fraud. If you are in Scotland, contact Police Scotland on 101.
Don’t click links or provide personal information. If it is a suspicious text message, forward it to 7726. Suspicious emails can be forwarded to report@phishing.gov.uk. If you have already provided banking details or lost money, contact your bank immediately.
Be extremely cautious. Never send money, cryptocurrency, gift cards or valuable goods to someone you have only met online, no matter how convincing their story may be. Talk to someone you trust and take time to independently verify who the person is.
Useful Online Security Resources from the National Cyber Security Centre
Want to learn more about staying safe online? Explore these trusted NCSC resources:
Conclusion
Staying safe online doesn’t have to be complicated. The most important thing is to slow down when something doesn’t feel right, check who you are dealing with and protect your accounts with strong security measures.
Remember these simple online security tips:
- Use strong, unique passwords or passkeys wherever they are available.
- Turn on two-step verification for important accounts.
- Keep your devices, apps and software up to date.
- Don’t click suspicious links or provide sensitive information because someone asks you to.
- Check that websites and companies are genuine before making payments.
- Never send money to someone you have only met online.
- If you think you’ve been scammed, contact your bank immediately and report the fraud.
Most importantly, don’t be embarrassed if something goes wrong. Scammers are professionals at deception and manipulation. Acting quickly can make a real difference.