Your first steps on the internet

Key terms

Browser

The program you use to open websites: Chrome, Safari, Firefox, Edge and others.

Website address

The name of a site in the address bar, for example vantemio.com. It tells you where you are.

Phishing

A scam in which fraudsters copy a real website or write in a bank’s name to trick you into giving away a password, card number or code.

Two-step sign-in

Signing in with two steps: a password, then a code from an app or SMS. Even if your password is stolen, nobody can sign in without the code.

Step by step

The orange numbers on the images match the numbers in the text. Tap an image to see it in full.

1. 01

   Check the address every time

   The address bar (number 1) shows which site you are on. Look at the site name before the first slash: here it is mybank.example. Check it every time before you sign in or enter any details.

   The “Back” button (number 2) takes you to the previous page. The lock next to the address means just one thing: the connection is encrypted (number 3). It does not prove the site is honest. Scam sites have a lock too.

   • Open your bank and important services from bookmarks, or type the address yourself
   • Read the whole site name, letter by letter

   • Do not trust a site just because of the lock
   • Do not enter your password on a site whose address you do not recognise

   

2. 02

   Tell ads from search results

   You are searching for how to pay utility bills (number 1). The first result is often an ad labelled “Ad” (number 2). That spot is paid for, and a promise of “no fees” guarantees nothing.

   The service’s official site (number 3) may be lower down. Before you tap, check the address: city-services.example matches the name of the service, while pay-fast.example is an unrelated site.

   Tip. If you know the official address, save it as a bookmark instead of searching for it every time.

   

3. 03

   Recognise a fake bank page

   The page looks like a bank, but the address is different (number 1): mybank-login.example instead of mybank.example. Scammers add words like login, secure or verify to the real name, or change one letter or the ending of the address.

   The form asks for a card number and an SMS code (number 2). A real bank never asks for both together on a page you reached through a link: an SMS code confirms a sign-in or a payment. The screen shows the right action (number 3): close the page and enter nothing.

   Important. If you have already entered your details, call your bank right away on the number on the back of your card and ask them to block it.

   

4. 04

   Create a long password for every site

   In the “New password” field (number 1), it is better to enter a long phrase than a short string of symbols. Four random simple words, such as “lamp-cloud-guitar-north”, are stronger than “Qw3rty!”: the phrase is easier to remember and harder to guess.

   The tips on the screen (number 2) remind you of the essentials: a separate password for every site, and two-step sign-in turned on for important accounts. If one site is hacked, your other accounts stay safe.

   • Keep your passwords in the password manager of your browser or phone
   • Turn on sign-in with a code for email, your bank and social networks

   • Do not use one password on several sites
   • Do not share SMS codes with anyone, even “bank staff”

   

5. 05

   Delete the scam message

   A message arrives from an unknown number: “Your card is blocked. Follow the link to unlock it” (number 1). Scammers play on fear and urgency so you do not have time to think. Do not open the link.

   The hint on the screen (number 2) explains: a bank does not send such links. If you are unsure, call your bank on the number on the back of your card. In the trainer, tap “Delete the message” (number 3).

   Tip. Signs of a scam: urgency, a threat of blocking, a link to “unblock” and a request for a code or card details.

   

Common mistakes and what to do instead

Test yourself

Answer in your head first, then reveal the answer.