Cybersecurity Concerns: A Real story
Last night, I got a call from my friend Lisa, and honestly, it was unsettling. Her voice was pretty shaky. Someone had deleted her PayPal account, then Amazon, and they even attempted to access her bank in less than an hour. What’s alarming? The criminals didn’t even need her password. They just used her email.
Now, think about this for a minute. Your bank statement, health results, retirement account details—all of that sensitive information is likely tied to your email. And here’s the kicker: every time you need to reset a password, it’s all sent to your inbox.
No hacking into banks needed. Just get into the email, and it’s like having the keys to the castle. It’s not a flaw—it’s how the system was designed. Yet, many people still use the same password they’ve had since the early 2000s.
That needs to change.
Realities of Cybercrime
Here’s how swiftly it occurs: A criminal finds a bank’s website, hits “Forgot your password?” and enters the email address. The bank sends a reset link straight to that email. Since the criminal’s already in there, they just click the link, create a new password, and boom—they’re in. This extends across accounts like Amazon or PayPal, and even your health insurance portal.
It takes about a minute per account. Honestly, it’s easier than ordering pizza.
The FBI has termed this “account takeover fraud,” and it cost Americans $2.7 billion last year alone. Here’s something that really gets to me: 81% of victims maintained they were “very cautious” about security. Those are their words, not mine.
Protect Yourself: Key Steps
1. Update Your Email Password
If your email password is less than 16 characters or if you’ve recycled it, change it immediately. I personally use a password manager to generate complex passwords that look like a cat walked across the keyboard. Just remember one strong master password, and it handles the rest.
2. Enable Two-Factor Authentication
This means even if a password’s stolen, access is still blocked without another code. But don’t rely on SMS text codes—they can be intercepted via SIM swapping. Instead, use an authenticator app like Google Authenticator. Just swap out SMS authentication in your email security settings; it’s a quick five-minute task.
3. Audit Apps Linked to Your Email
Every time you hit “Sign in with Google,” you’re handing that app access to your email. Some might even allow message reading. Last year, I found 34 apps had access to my Gmail. Apps I had completely forgotten about still held on to my credentials.
Go to your Google account, check the security settings, and remove anything you don’t recognize. It’s essential.
Remember, your bank offers fraud protection, and credit cards come with some liability coverage. But when it comes to your email? You’re on your own.
It can take just 20 minutes and a few simple steps to secure your accounts. Lisa wishes she had tackled this on a calm Sunday rather than in a panic.
Your inbox can be either a sturdy fortress or a gaping entrance. There’s no in-between. Unlike a front door, this one doesn’t even need a deadbolt, just robust security measures.
