The first potential vulnerability when spending online is the device not being securely set up. Check with learners that they have:

• a screenlock that requires a passcode or biometric (face or fingerprint) to log in to stop unauthorised access (hacking)
• the latest operating system (usually iOS, android or Windows) installed as this usually fixes potential security vulnerabilities
• antivirus software installed, turned on and updated to reduce risk of viruses or ransomware
• installed apps from approved providers, such as App Store or Play Store to avoid malicious content
• only using secure websites that have the padlock symbol and https in the address bar

When setting up and using accounts with access to funds, such as shopping, gaming or streaming, users should:

• stick to well-known platforms that other people use regularly, such as supermarkets and apps from the app store or Play store
• use review sites, such as Trustpilot, when using a new or less well-known app
• consider using a separate email account form the one used to access their bank
• use a stronger password including three random words and not share this with anyone
• use 2FA or additional security features when available

Anyone who believes they have been a victim of scams, fraud or theft should report it to Police Scotland by phoning 101.

Whether a victim or not, all potential scams should be reported to the National Cyber Security Centre (NCSC) who will investigate and then remove or block the scams so that others do not fall victim. 

If money has been stolen, or personal details accessed from a financial account, then contact the bank or service provider immediately and then update login details such as email address, password and 2FA.