Beyond fun and games: Exploring privacy risks in children’s apps

Child-targeted apps can be dangerous, collecting data without their permission or knowledge. Almost half of Android apps studied collected more than one piece of personal data. More than half of these apps won't let you delete the collected data. While there are some laws that protect children's data, watch out for the following:

• in-app purchases
• advertising
• excessive data collection
• oversharing
• limited parental controls
• inappropriate content
• security risks

Want to learn more?

How to safely scan a QR code using your smartphone

How can you stay safe when using a QR code? 

Want to learn more?

Your smart TV is snooping on you. Here's how to limit the personal data it gathers

Smart TVs collect personal data even without you signing into a particular service. They use Automatic Content Recognition (ACR) to watch and listen to every show you watch regardless of whether it is a streaming service, Blu-ray, DVD or a video server. This tool constantly pattern-matches video frames and audio snippets against an audio and visual database.They also use Advertisement Identification (AdID) which identifies every commercial that you watch. TV manufacturers are selling this information. 

If you have an Amazon Fire TV, Google TV, LG, Roku, Samsung or Vizio, you can limit the data collection. Read the whole article for details.
 

Want to learn more?

The 7 signs you’ve been hacked
 

1. Slow device
2. Random or constant shut downs
3. Strange pop-ups
4. People are receiving messages from you that you didn't send
5. New applications have been installed on your computer without your knowledge
6. Sudden changes to your login credentials or account information
7. The browser redirects you to a web page you didn't ask to go to

Want to learn more?

Borrower beware: Common loan scams and how to avoid them

Cyber criminals are using loan fraud to take advantage of people struggling to make ends meet.

Top loan fraud threats

• Upfront fee for a no-strings attached loan
• Student loans repayment help
• Phishing emails with fake loan applications
• Malicious loan apps
• Payday loan scams
• Fake requests for loan repayment
• Identity theft

Stay safe from loan fraud

Look for the following red flags like guaranteed approval, request for upfront payment, unsolicited contact, pressure tactics and lack of fine print. To protect yourself research the company offering the loan, never pay an upfront fee without seeing the terms, use anti-malware, enable multi-factor authentication, don't reply to unsolicited emails, don't overshare online. When using loan apps, only download apps from official Google/Apple app stores, read reviews and avoid those that ask for excessive permissions.

Want to learn more?

Your loved one is calling and they need help: how do you know it is really them and not a deep fake?

Want to learn more?

How to share sensitive files securely online

• File transfer protocol or FTP, as files aren't encrypted
• Peer-to-peer or P2P, which can work for some files but has shortfalls
• Email, as it isn't always encrypted end-to-end

• Choose a provider that focuses on security
• Password protect files and enable multi-factor authentication
• Set a time limit on download links
• Use security software and a virtual private network on public wifi

Want to learn more?

What to Do When Your Phone Number Is Being Spoofed

How to stop scammers from spoofing your phone number:

• Let your mobile carrier know
• Block calls from anyone not in your address book
• Put a password on your voicemail
• Update your voicemail message to explain you have been spoofed
• Check your phone bill for unusual activity
• Wait for the scammers to move on to another number. If they don't, get a new phone number.

How to stop receiving spoofed calls:

• Let unknown numbers go to voicemail
• Block robocalls
• Block unknown numbers
• Use a phone filter app

Want to learn more?

5 Google Drive tips to help you prevent disasters

1. Use a strong password and enable two-step verification to secure your account.
2. Create your documents in Google Drive, rather than an app. This makes them easier to locate.
3. Use the version history to reverse document changes.
4. Back up your files in another folder in case you accidentally delete them.
5. Lock your files to keep them from being edited.

Want to learn more?

10 things to avoid posting on social media – and why

Oversharing on social media can put you at risk of identity fraud, password compromise and theft.

Things you should keep to yourself:

1. Personally identifiable information (PII) can be used to open accounts, apply for credit, crack passwords and hijack your accounts.
2. Travel plans let people know no one is at home. Wait until you return from your trip to post.
3. Location data lets criminals know your home is unattended or where you could be intercepted and robbed.
4. Expensive purchases make you a target for mugging or burglary.
5. Photos of kids can be scrapped from your site for unsavoury purposes. If you want to post photos, get permission first. 
6. Work-related grievances should not be shared online. Griping online could get you disciplined or fired.
7. Financial details should not be posted online. Even blurry images of payment cards exposes you to fraud risk.
8. PII of family/friends needs to be treated as carefully as you treat your own.
9. Social media giveaways are often used to collect PII. If it seems too good to be true, it probably is.
10. Private conversations can cause strife and stress for yourself and others. If it isn't your news to share, don't share it.

To avoid oversharing, consider:

• being mindful of what and when you post.
• reviewing your friends list regularly.
• restricting who can view your friends list, photos and posts.
• enabling MFA and having a strong, unique password.

Want to learn more?

How to protect yourself from the Google Voice scam

Google Voice is a free service that lets you send and recieve texts and phone calls online. It uses verification codes to set up an account. Scammers are taking advantage of this service to impersonate you. They are using dating apps, Facebook Marketplace and Craig's List to find their victims.

How the scam works

1. The scammer contacts you via text, email or phone for a valid reason, like wanting to purchase something you have posted on Facebook Marketplace.
2. The scammer asks to verity your identify using a code to ensure you can be trusted.
3. Without your knowledge, they use your phone number to set up a new Google Voice account and a verification code is sent to you.
4. They ask you for the code.
5. The scammer uses your Google Voice number to pretend to be you or someone else. They now have access to everything that Google Voice does including your personal information, contacts, messages and voicemail.

How to protect yourself

• Never share verification codes. They do not prove your identity.
• Do your research. Google the person, look for fraud alerts and ask for references.
• If it seems too good to be true, it probably is. Walk away from anything that feels off.

Want to learn more?

How to stop V-day scams before they break your heart and your bank account 

• quickly try to create a strong connection or say they love you.
• always have an excuse for not video chatting or meeting in person.
• urgently asks for money, gift cards or favors.
• sends you email with links or attachments loaded with malware 
• are inconsistent or vague details about themselves, their work or their location.

• online greeting cards that appear to come from family and friends may be loaded with malware. Check with the sender to confirm the card came from them.
• new dating websites can be malicious, collecting your personal information to use against you later. Check for reviews and make sure the site is legitimate.
• sharing intimate photos with others can lead to sextortion. Be careful what you share and be aware some threats are just bluffs.

• Go slow and let the relationship develop over time.
• Trust your instinct. You have the right to end the relationship even if you don't have evidence that they aren't being truthful. Don't do anything that is unsafe or feels wrong.
• Give yourself permission to end the relationship without a final conversation especially if you are worried they will manipulate you into continuing contact. Feel free to block them from contacting you further. 

Want to learn more?

Beware of malicious files in your Shared with me folder

Scammers are using the ease of Google Drive file sharing to dump documents in your Shared with me folder. To put a file in your Shared me me folder, all they need is your email address.

Google scans all shared documents so opening the scammer's document is not dangerous. Clicking on any links in the document is.

Read the whole article.

Want to learn more?

10 tips for protecting personal information from the Office of the Privacy Commissioner of Canada

1. Think twice before you give out your personal data. Ask yourself, why it is needed, how it will be used and who will see it.
2. Ask questions. How will your data will be used and protected. The company should respond.
3. Speak up about any concerns around the use of your data.
4. Just say no. Sign up for the Do Not Call list and the Do Not Mail list.
5. Safeguard your SIN. It should only be used for income reporting purposes.
6. Password protect your devices.
7. Protect your passwords. Make them long and unique.
8. Adjust your privacy settings. Never rely on default settings.
9. Properly clean old devices before you discard them.
10. Know your rights to privacy.

Want to learn more?

Is Temu safe? What to know before you ‘shop like a billionaire’

Temu is a Chinese based online retailer that sells items at rock bottom prices. It also allows you to earn credits towards future purchases by playing a spin the wheel game or by referring others to the site. 

However shoppers find it difficult to return items, have their inbox spammed or recieve items in poor conditions or not at all. To make matters worse scammers are taking advantage of the companies sales model by:

• Using social media offering nude celebrity photos, fake celebrity products and Fortnite/Roblox gift cards, if a link is clicked and the Temu referral code is entered. The scammer gets the referal credit and the victim gets nothing.
• Setting up fake Temu ads, websites and promo emails that send the users to a fake Temu site where their payment information is harvested.

• Don't click on links in emails or ads. If you want to take advantage of a Temu offer, visit their website directly.
• Enable MFA on your Temu account.
• Don't save payment information in your Temu account.
• Don't accept offers that require you to enter a Temu referral code, even if it comes from a celebrity.
• Use the website rather than the app.
• Don't login using a social media account.
• Use a payment service or rechargeable payment card rather than your credit card to prevent account compromise.
• Have the order shipped to a PO Box rather than your home address.

Want to learn more?

10 Signs your identity has been compromised

1. Unexplained charges on your credit card
2. Unauthorized withdrawls from your bank account
3. You recieve calls from debt collectors
4. You stop receiving emails or you start receiving someone else's emails
5. You receive credit card statements for credit cards that you don't have
6. You receive notice that you have filed your taxes when you haven't
7. You receive an unexpected bill
8. Police question you about a crime you did not commit
9. The CRA asks you about wages that you didn't earn
10. Odd activity on your credit report

• Change your passwords
• Look at bank/credit card statements to determine when the compromise occured
• Inform your bank and the credit card companies
• File a police report
• Contact Equifax and Transunion, run a credit report on yourself then have them put a fraud alert on your credit report
• Report the fraud to the Canadian Anti-Fraud Centre
• Consider consulting with a lawyer

Want to learn more?

To tap or not to tap: Are NFC payments safer?

Near-field communication (NFC) allows you pay for purchases by tapping a chip enabled payment card or by using your smartphone. For this technology to work, the card or phone has to be in very close proximity to the card reader.

If an attacker has a special card machine for reading the card data and they bump into you, they could connect to your payment card and steal your money. Smartphones are considered to be more secure as you are required to confirm any transactions with a pin code or biometric, making the bump attack more ineffective.

Want to learn more?