In 2026, one in four families has been the victim of a cyberattack or online scam. Yet 90% of these incidents could have been prevented with a few basic rules. This guide gives you everything you need to know — with no technical jargon.
If you use the same password everywhere, one single breach is enough to lose everything. Hackers automatically test stolen passwords on every popular site — banks, social media, email.
- Use a passphrase: MyDog@dores3Croissants! — long, unique, memorable
- Install a free manager like Bitwarden — it remembers everything for you
- Avoid birthdays, first names, and variations like "password123"
Two-factor authentication (2FA) adds a second lock after your password. Even if a hacker knows your password, they can't access your account without this second code.
- Enable it first on: email, bank, Facebook, Instagram
- Prefer an app (Google Authenticator, Authy) over SMS — more secure
- Write down your recovery codes somewhere safe — in case you lose your phone
In 2026, scams are AI-generated — perfectly written, with the right logos. But they always share the same characteristics:
- Artificial urgency — "action required within 24 hours", "your account will be suspended"
- Request for money or bank details — never legitimate by email or text
- Suspicious email address or link — @hmrc-gov.info instead of @hmrc.gov.uk
- When in doubt: go directly to the official website by typing the URL yourself
Hackers exploit known vulnerabilities in outdated software. The Linux Copy Fail flaw, discovered in 2026, had been hiding in the code since 2017 — millions of unpatched devices remain vulnerable today.
- Enable automatic updates on iPhone, Android, Windows, Mac
- Also update your WiFi router — often forgotten but highly exposed
- Install antivirus on all devices — Bitdefender Family protects up to 15 devices
Your router connects to all your devices — TV, phones, computers, NAS, cameras. A poorly secured WiFi is an open door to your entire digital home.
- Change the default WiFi password — not your street name or first name
- Use WPA3 or WPA2 encryption — never WEP (outdated)
- Use a VPN on public WiFi (cafe, airport, hotel) — NordVPN is recommended
- Create a separate guest network for visitors
Children are prime targets for predators, scams and dangerous content. TikTok, Instagram, Discord — each platform has its specific risks. Technology helps, but family conversations are irreplaceable.
- Enable parental controls on all their devices and accounts (TikTok Family Pairing, iOS Screen Time...)
- Set all their accounts to private mode
- Establish a simple rule: "any stranger online is a stranger"
- Tell them they can always come to you without fear of punishment
Parcel scams hit millions of people every week. In 2026, hackers use AI to generate realistic photos of parcels with your name on the label, and even synthetic voices imitating delivery drivers.
- Royal Mail, DHL and DPD never ask you to pay via a text link
- Be wary of messages from regular mobile numbers — couriers don't text from personal phones
- When in doubt: type royalmail.com yourself in your browser
- Report suspicious texts to 7726 (spells SPAM) for free in the UK
The classic scenario: you receive a parcel scam text, you pay £1.99 — and a few hours later a "bank advisor" calls to tell you there's suspicious activity on your account. It's a fraudster.
- Your bank will never ask you to move your funds to "protect" them
- They will never ask for your PIN or login details
- If suspicious call: hang up and call back the number on the back of your card
Hackers gather information about you before striking. Your name, children's school, holiday dates, city — all data that can be used to personalise a scam or target you physically.
- Never share your address or daily routine publicly
- Don't announce holidays in real time — wait until you're back
- Check your privacy settings on all social networks
- Set your profiles to private mode
If you think you've been the victim of a scam or hack, every minute counts. Here are the steps in order.
- Change your email password first — it's the key to everything else
- If bank details compromised: call your bank immediately to freeze the card
- Report to Action Fraud at actionfraud.police.uk — free official help
- For a hacked Facebook account: go to facebook.com/hacked
- File a police report if you've suffered financial loss
Want a personalised diagnosis?
CyberScan analyses your situation in 4 questions and gives you a score out of 100 with priority actions for your family.
🔍 Launch my free CyberScan → 🤖 Ask CyberGuard a question