My Security Checklist

1. Check that each device can still get updates. Devices that have reached 'end of support' no longer get security fixes.
2. Open the device's settings and find the software update section.
3. Turn on automatic updates where the option exists.
4. Do the same for apps, in the App Store, Google Play or Microsoft Store settings.
5. For anything without automatic updates, check for updates regularly.
6. Before a big system upgrade, back up and free up some storage, as low space can stop updates installing.

Based on the ACSC's updates guide, checked October 2026. The device questions in this checklist show the steps for each type of device.

1. Start with the most important accounts, such as email, banking and social media.
2. Create a passphrase of four or more random words. The ACSC's example is 'crystal onion clay pretzel' (an example only, not one to use).
3. Use a different passphrase for every account.
4. If a site insists on symbols, capitals or numbers, add them to the passphrase.
5. A password manager can create and store a different password for each account, so only one master password has to be remembered.

Based on the ACSC's passphrase guidance, checked October 2026. Menus can change; the official page has the latest details.

1. Sign in to the email account and open its security settings.
2. Look for multi-factor authentication, two-factor authentication or 2-step verification, and turn it on.
3. If using an authenticator app, download the app first, then scan the QR code shown in the account settings.
4. Enter the six-digit code from the app to finish setting up.
5. From then on, signing in on a new device asks for a code or approval as well as the password.

Based on the ACSC's multi-factor authentication guide, checked October 2026. Each email provider's help pages have the exact menu names.

1. Decide what matters most: photos, documents, messages, or the whole device.
2. Choose where the copies go: a cloud service, an external drive, or both.
3. Turn on automatic backup in the device or app settings where it's offered.
4. Disconnect an external backup drive when it isn't in use, so malware on the computer can't reach it.
5. Every so often, try restoring a file to check the backup works.

Based on the ACSC's backups guidance, checked October 2026. The device questions in this checklist show the steps for each type of device.

1. Don't share the code with anyone who contacts you, even if they say they're from a trusted organisation.
2. Hang up or stop replying.
3. Find the organisation's contact details yourself, on its official website or app.
4. Contact it that way to check whether the request was real.

Based on Scamwatch's phishing guidance, checked October 2026. Menus can change; the official page has the latest details.

1. Open Settings, then tap General.
2. Tap Software Update.
3. Tap Automatic Updates.
4. Turn on Automatically Install. The iPhone installs updates overnight while charging on Wi-Fi, and lets you know beforehand.
5. To update straight away, go back to Software Update and tap Download and Install if an update is shown.

Based on Apple's instructions, checked October 2026. Menus can change between versions; Apple's guide has the latest steps.

1. Open Settings.
2. Tap Face ID & Passcode (or Touch ID & Passcode, or Passcode, depending on the model).
3. Tap Turn Passcode On.
4. Enter a six-digit passcode, or tap Passcode Options for a custom numeric or alphanumeric code.
5. Enter the passcode again to confirm.

Based on Apple's instructions, checked October 2026. Menus can change between versions; Apple's guide has the latest steps.

1. Open Settings and tap your name.
2. Tap Find My.
3. Tap Find My iPhone, then turn it on.
4. Turn on Find My network so the iPhone can be located while offline, and Send Last Location to send its location to Apple when the battery is low.

Based on Apple's instructions, checked October 2026. Menus can change between versions; Apple's guide has the latest steps.

1. Open Settings, tap your name, then tap iCloud.
2. Tap iCloud Backup.
3. Turn on Back Up This iPhone.
4. To back up straight away, tap Back Up Now and stay on Wi-Fi until it finishes.
5. Automatic backups run when the iPhone is on power, on Wi-Fi and locked. If iCloud storage runs out, the iPhone shows an alert.

Based on Apple's instructions, checked October 2026. Menus can change between versions; Apple's guide has the latest steps.

1. Open Settings and tap your name.
2. Tap Sign-In & Security.
3. Check whether two-factor authentication shows as on.
4. If it's off, turn it on and follow the prompts.

Based on Apple's instructions, checked October 2026. Menus can change between versions; Apple's guide has the latest steps.

1. Open Settings.
2. Tap About phone, then Android version, to see the Android version and the date of the latest Android security update.
3. To look for updates, go back to Settings and tap System, then Software updates.
4. Follow the on-screen steps to install any update shown.
5. When an update notification appears, tapping it starts the same process.

Based on Google's instructions, checked October 2026. Menu names differ between phone makers; the maker's support site has the exact steps.

1. Open Settings.
2. Tap Security. If it isn't there, the phone maker's support site shows where the setting is.
3. Tap Screen lock. If a lock is already set, enter it first.
4. Choose PIN, Pattern or Password and follow the on-screen steps.

Based on Google's instructions, checked October 2026. Menu names differ between phone makers; Google's guide and the maker's support site have the latest steps.

1. Check the phone is signed in to a Google Account and has a PIN, pattern or password set.
2. Check Find Hub is turned on for the phone.
3. If the phone is lost, open the Find Hub app on another Android device, or go to google.com/android/find in a browser, and sign in.
4. Select the phone to see it on the map, or choose Mark as lost to lock it and show a contact message.
5. Factory reset erases the phone, but after that it can no longer be located.

Based on Google's instructions, checked October 2026. Menus can change between versions; Google's guide has the latest steps.

1. Open Settings.
2. Tap Google services (on some phones, Google), then All services.
3. Find Backup and choose what to back up: Photos & videos, Device data, or both.
4. Turn on Backup.
5. 'On' appears under each item once it's saved. Google says a backup can take up to 24 hours to complete.

Based on Google's instructions, checked October 2026. Menus can change between versions; Google's guide has the latest steps.

1. Open the Google Play Store app.
2. Tap your profile icon at the top right.
3. Tap Play Protect, then the Settings icon.
4. Check that Scan apps with Play Protect is turned on.

Based on Google's instructions, checked October 2026. Menus can change between versions; Google's guide has the latest steps.

1. Select Start, then Settings > Windows Update.
2. Select Check for Windows updates.
3. If updates are listed, select Download & install.
4. Restart when asked, to finish installing.

Based on Microsoft's instructions, checked October 2026. Menus can change between versions; Microsoft's guide has the latest steps.

1. Open Settings, then Accounts > Sign-in options.
2. Under Ways to sign in, select Set up Windows Hello.
3. Follow the prompts to set up a face, fingerprint or PIN.
4. Optional: under Additional settings, turn on Dynamic lock, which locks the PC when a paired phone moves out of Bluetooth range.

Based on Microsoft's instructions, checked October 2026. Menus can change between versions; Microsoft's guide has the latest steps.

1. Select Start, search for Windows Security, and open it.
2. Select Virus & threat protection.
3. Under Virus & threat protection settings, select Manage settings.
4. Check that Real-time protection is switched on.

Based on Microsoft's instructions, checked October 2026. Menus can change between versions; Microsoft's guide has the latest steps.

1. Sign in to Windows with a personal Microsoft account that is an Administrator on the device.
2. Open Settings, search for Find my device, and turn it on. Location also has to be on for the device.
3. If the laptop is lost, go to account.microsoft.com/devices and sign in with the same Microsoft account.
4. Open the Find my device tab and choose the device to see it on the map.
5. Select Lock, add a message for whoever finds it, then reset the account password.

Based on Microsoft's instructions, checked October 2026. Menus can change between versions; Microsoft's guide has the latest steps.

1. Sign in to Windows with a personal Microsoft account. Microsoft says work or school accounts don't work with Windows Backup.
2. Select Start, type backup, and open Windows Backup.
3. Expand Folders and turn on the folders to back up, such as Documents and Pictures.
4. Turn on the apps and settings to include.
5. Select Back up. The status shows later in Settings > Accounts > Windows backup.

Based on Microsoft's instructions, checked October 2026. Menus can change between versions; Microsoft's guide has the latest steps.

1. Choose Apple menu > System Settings.
2. Click General, then Software Update.
3. Click the Info button (i) next to Automatic Updates.
4. Turn on Download new updates when available, Install macOS updates, and Install Security Responses and system files.
5. To update now, click the update or restart button if an update is shown, and keep the Mac awake until it finishes.

Based on Apple's instructions, checked October 2026. Menus can change between versions; Apple's guide has the latest steps.

1. Choose Apple menu > System Settings.
2. Click Lock Screen in the sidebar (scroll down if needed).
3. Find Require password after screen saver begins or display is turned off.
4. Choose how soon after the screen saver or sleep starts the password is needed.

Based on Apple's instructions, checked October 2026. Menus can change between versions; Apple's guide has the latest steps.

1. Choose Apple menu > System Settings.
2. Click your name, then iCloud.
3. Click See All, scroll down, and click Find My Mac.
4. Click Turn On, entering the Apple Account password if asked.
5. Click Allow so Find My Mac can use the Mac's location.

Based on Apple's instructions, checked October 2026. Menus can change between versions; Apple's guide has the latest steps.

1. Connect an external drive. Apple suggests one with at least twice the Mac's storage.
2. Choose Apple menu > System Settings, then General > Time Machine.
3. Click Add Backup Disk (or the + button).
4. Select the drive and click Set Up Disk. Turning on encryption asks for a password, which is needed later to restore.
5. Time Machine then backs up automatically: hourly for the past day, daily for the past month, and weekly before that.

Based on Apple's instructions for macOS Ventura and later, checked October 2026. Menus can change between versions; Apple's guide has the latest steps.

1. Look for the Update device notification at the bottom right, next to the time.
2. Select it and choose Restart.
3. To check manually, select the time, then the Settings gear, then About ChromeOS.
4. Select Check for updates. Any update found downloads automatically.

Based on Google's instructions, checked October 2026. Menus can change between versions; Google's guide has the latest steps.

1. Select the time at the bottom right, then Settings.
2. Select About ChromeOS.
3. Select Additional details.
4. Under Update schedule, read the date the Chromebook stops getting automatic updates.

Based on Google's instructions, checked October 2026. Menus can change between versions; Google's guide has the latest steps.

1. Select the time at the bottom right, then the Settings gear.
2. Go to Privacy and security, then Lock screen and sign-in.
3. Turn on Lock when sleeping or lid is closed.
4. Optional: in the same place, choose PIN or password, then Set up PIN (at least six digits).
5. To lock straight away, press Search + L (or Launcher + L).

Based on Google's instructions, checked October 2026. Menus can change between versions; Google's guide has the latest steps.

1. Go to myaccount.google.com and sign in.
2. Select Security & sign-in.
3. Under How you sign in to Google, select Turn on 2-Step Verification.
4. Follow the on-screen steps. For work or school accounts, the administrator may manage this.

Based on Google's instructions, checked October 2026. Menus can change between versions; Google's guide has the latest steps.

1. iPad: open Settings, then General > Software Update > Automatic Updates, and turn on Automatically Install.
2. Android tablet: open Settings, then System > Software updates, to check for updates (names vary by maker).
3. Install any update shown, with the tablet charging and on Wi-Fi.
4. For apps, turn on automatic updates in the App Store or Google Play settings.

Based on Apple's and Google's instructions, checked October 2026. Menus can change between versions; the maker's guide has the latest steps.

1. iPad: open Settings, then Face ID & Passcode or Touch ID & Passcode (or Passcode), and tap Turn Passcode On.
2. Android tablet: open Settings, then Security > Screen lock.
3. Choose a PIN, pattern, password or passcode and follow the prompts.
4. Enter it a second time to confirm.

Based on Apple's and Google's instructions, checked October 2026. Menus can change between versions; the maker's guide has the latest steps.

1. Install apps only from the App Store or Google Play, and check they're made by a reputable company.
2. iPad: open Settings > Privacy & Security (Privacy on older versions), then tap a category such as Photos or Microphone to see which apps have access.
3. Android tablet: open Settings > Apps, choose an app, then tap Permissions.
4. Switch off any permission an app doesn't need, or remove apps that ask for too much.

Based on the ACSC's mobile phone guide and Apple's and Google's instructions, checked October 2026. Menus can change between versions; the maker's guide has the latest steps.

1. iPad: open Settings, tap your name, then Find My > Find My iPad, and turn it on.
2. Turn on Find My network so the iPad can be found while offline.
3. Android tablet: check it's signed in to a Google Account with a PIN, pattern or password set, and that Find Hub is on.
4. To look for a lost Android tablet, use the Find Hub app on another device or go to google.com/android/find.

Based on Apple's and Google's instructions, checked October 2026. Menus can change between versions; the maker's guide has the latest steps.

1. Connect to the router by Wi-Fi or cable, then type the router's IP address (often 192.168.0.1 or 10.0.0.1) into a web browser.
2. Sign in with the admin username and password. These are different from the Wi-Fi name and password.
3. Find the admin or account settings page.
4. Change the username and password to a strong passphrase, then save.
5. Sign out and back in with the new details to check they work.

Based on the ACSC's Wi-Fi and router guidance, checked October 2026. Menus vary by router maker; the router's manual or the maker's website has the exact steps.

1. Check the maker's website or the manual to see whether the router updates automatically.
2. Sign in to the router's settings and note the current firmware version.
3. Open the firmware or update page and install any update shown.
4. Don't unplug the router or press reset during an update. The ACSC warns a failed update can make the router unusable.
5. Check the version number has changed, and set a reminder to check again in six months.

Based on the ACSC's Wi-Fi and router guidance, checked October 2026. Menus vary by router maker; the router's manual or the maker's website has the exact steps.

1. Find the model number on the router's sticker or in its manual.
2. Search the maker's website for an end-of-life or end-of-support date, or ask the maker's support team.
3. If no firmware update has come out for more than 12 months, the ACSC says the router is likely end-of-life.
4. The ACSC describes choosing a replacement that supports automatic updates, and notes internet providers can advise on suitable models.

Based on the ACSC's Wi-Fi and router guidance, checked October 2026. The router maker's website has model-specific support dates.

1. Sign in to the router's settings and open the Wi-Fi or wireless security page.
2. Set encryption to WPA3. If some devices can't connect, use WPA3 transition mode; if neither is offered, use WPA2 (WPA2-Personal or WPA2-PSK).
3. Change the Wi-Fi password to a long, unique passphrase.
4. Change the network name from the default, leaving out personal information.
5. Save, then reconnect each device with the new password. Repeat for each band, such as 2.4 GHz and 5 GHz.

Based on the ACSC's Wi-Fi and router guidance, checked October 2026. Menus vary by router maker; the router's manual or the maker's website has the exact steps.

1. Open the TV or streaming box's Settings menu.
2. Look for a section such as Software update, System or Support (the name varies by maker).
3. Turn on automatic updates if the option is there.
4. Otherwise, check for updates there from time to time and install any that are shown.

Based on the ACSC's smart device guidance, checked October 2026. Menus vary by maker; the device's manual or the maker's support website has the exact steps.

1. Check the TV maker's privacy policy or settings for what is collected. The ACSC says this information should be available from the manufacturer.
2. On Google TV, watch history can be removed at myactivity.google.com: search for Google TV, then delete.
3. On Google TV, location access is under Settings > Privacy > Location.
4. On other TVs, look in the Settings menu for a Privacy or viewing information section.

Based on Google's Google TV help and the ACSC's smart device guidance, checked October 2026. Menus vary by maker; the device's manual or the maker's support website has the exact steps.

1. Find the model number in the TV's settings (often under About or System) or on its label.
2. Search the maker's website for the end-of-support or security update period for that model.
3. If it isn't listed, ask the maker's support team.
4. Note the date, so you know when updates will stop.

Based on the ACSC's smart device guidance, checked October 2026. Menus vary by maker; the device's manual or the maker's support website has the exact steps.

1. Open the device's companion app or settings page.
2. Find the account, security or password section.
3. Replace any default or short password with a long, unique passphrase.
4. Give the app account that controls the device its own passphrase too, and turn on MFA if it's offered.

Based on the ACSC's smart device guidance, checked October 2026. Menus vary by maker; the device's manual or the maker's support website has the exact steps.

1. Open the device's app and look for a firmware or software update section.
2. Turn on automatic updates if offered.
3. If not, check the maker's website regularly and install updates when they're released.
4. Check the device's end-of-support date. The ACSC describes considering replacement once updates stop.

Based on the ACSC's smart device guidance, checked October 2026. Menus vary by maker; the device's manual or the maker's support website has the exact steps.

1. Open the device's app and go through its settings.
2. Turn off cameras, microphones or other features you don't use, where possible.
3. Find any remote access setting and set it to local network (LAN) only, unless the device has to be reached from outside the home.
4. Check the app's privacy settings and the maker's privacy policy for what data is collected.

Based on the ACSC's smart device guidance, checked October 2026. Menus vary by maker; the device's manual or the maker's support website has the exact steps.

1. Learn the device's indicator. Google says its devices show a clear sign, such as a green light, while the camera is on and sending footage.
2. Use the device's controls or app to turn the microphone or camera off when wanted. Google says these can always be turned off.
3. For Google Assistant recordings, go to myactivity.google.com to review and delete them.
4. For Nest camera audio and footage, use the Nest app to review and delete it.
5. Other makers explain their own steps in their apps and help pages.

Based on Google's Nest privacy page, checked October 2026. Menus vary by maker; the device's manual or the maker's support website has the exact steps.

1. Apple Watch: open Settings on the watch and tap Passcode.
2. Set a passcode by following the prompts (Simple Passcode uses four digits).
3. In the same place, check Wrist Detection is on, so the watch locks when it's taken off.
4. Wear OS watch: swipe down from the top, open Settings, then Security, and choose a screen lock.

Based on Apple's and Google's instructions, checked October 2026. Menus can change between versions; the maker's guide has the latest steps.

1. Apple Watch: open Settings on the watch, tap Passcode, and check Wrist Detection is on (Apple says it's on by default).
2. Wear OS watch: swipe down from the top, open Settings, then Security, and set a screen lock.
3. Google says a Wear OS watch also locks automatically if it loses its Bluetooth connection with the paired phone.
4. A Wear OS watch can also be locked by hand when it isn't being worn.

Based on Google's and Apple's instructions, checked October 2026. Menus can change between versions; the maker's guide has the latest steps.

1. Update the iPhone first, and put the watch on its charger with at least 50% battery.
2. Open the Watch app on the iPhone, tap My Watch, then General > Software Update.
3. Download the update and enter the passcode if asked. Keep the iPhone close to the watch until it finishes.
4. Or, on the watch: connect to Wi-Fi, open Settings > General > Software Update, and tap Install.
5. For other watches, the maker's app or help page has the update steps.

Based on Apple's instructions, checked October 2026. Menus can change between versions; Apple's guide has the latest steps.

1. Apple Watch: on the watch, open Settings, tap your name, scroll to the watch, and tap Find My Watch. Check Find My network is on.
2. Wear OS watch: Google says Find Hub can find, secure or erase a lost watch.
3. A Wear OS watch has to be connected to Wi-Fi or mobile data before it can be found, secured or erased.
4. To look for a lost Wear OS watch, open the Find Hub app or go to google.com/android/find.

Based on Google's and Apple's instructions, checked October 2026. Menus can change between versions; the maker's guide has the latest steps.

1. Sign in to the email account through its official website or app.
2. Open the account or security settings.
3. Find the recovery phone number and recovery (backup) email address.
4. Check both are current and yours. Update or remove anything that isn't.

Based on the ACSC's email compromise guidance, checked October 2026. Each email provider's help pages have the exact menu names.

1. Open the email account's settings and look for rules, filters or forwarding.
2. Delete any forwarding rule you don't recognise.
3. Check the list of connected or third-party apps and remove any you don't recognise.
4. Review recent sign-in activity for unusual times or places.
5. If something looks wrong, the ACSC's email compromise page lists further steps, such as changing the password and signing out of other sessions.

Based on the ACSC's email compromise guidance, checked October 2026. Each email provider's help pages have the exact menu names.

1. Don't click the link or open attachments in the message.
2. Open the organisation's official app, or type its web address yourself.
3. Sign in there and look for any message or alert.
4. If still unsure, contact the organisation using details found on its official website.

Based on Scamwatch's phishing guidance, checked October 2026. Menus can change; the official page has the latest details.

1. Sign in to internet banking or the official banking app.
2. Open the security settings.
3. Look for multi-factor authentication, two-step verification or similar, and follow the steps to turn it on.
4. To find out what the bank offers, check its official website or call the number on your card.

Based on the ACSC's multi-factor authentication guide, checked October 2026. Each bank's options and menus differ; the bank's own website has the exact steps.

1. Open the App Store or Google Play directly, not through a link in a message.
2. Search for the bank by name.
3. Check the developer name shown matches the bank.
4. After installing, check which permissions the app asks for.

Based on the ACSC's Secure your mobile phone guide, checked October 2026. Menus can change; the official page has the latest details.

1. Hang up, or don't reply to the text.
2. Find the bank's number on its official website or on the back of your card.
3. Call that number yourself.
4. Ask the bank whether the call or message was genuine.

Based on Scamwatch's phishing guidance, checked October 2026. Menus can change; the official page has the latest details.

1. Open the myGov app, or type my.gov.au into the browser yourself.
2. Don't sign in through links or attachments in emails, texts or social media messages.
3. Use a trusted private network and device. myGov says to avoid public Wi-Fi and public devices for your account.
4. When finished, sign out of myGov and any linked services, then close the browser.

Based on myGov's security page, checked October 2026. Menus can change; the official page has the latest details.

1. Sign in to myGov.
2. Open My account or Menu, then Account settings.
3. Under Sign in settings, find Passkeys and select Manage.
4. Select Create passkey, verify your account, then follow the prompts on your device and select Save.
5. myGov allows up to 3 passkeys and advises creating them only on a device you own and don't share. Once passkeys are set up, myGov describes turning the password off.

Based on myGov's instructions, checked October 2026. Menus can change; myGov's guide has the latest steps.

1. Keep the username, password, sign-in codes and secret answers private.
2. Use a unique passphrase that isn't used for any other account.
3. Turn off using your email address and mobile number as your username. The myGov-generated username still works.
4. Complete the security review in your myGov account for suggested actions.

Based on myGov's security page, checked October 2026. Menus can change; the official page has the latest details.

1. Open the app's settings and find the security or account section.
2. Look for two-factor authentication or MFA and turn it on.
3. If using an authenticator app, scan the QR code shown and enter the code from the app.
4. Turn on MFA for the email address linked to the account as well.

Based on the ACSC's multi-factor authentication and Secure your social media guides, checked October 2026. Each platform's help centre has the exact steps.

1. Open the app's settings and find Privacy (some apps group it in an account or privacy centre).
2. Choose who can see your posts, profile and friends or followers list.
3. Check tagging settings, so others can't tag you in photos without your say.
4. Review connected third-party apps and remove any you don't need or recognise.

Based on the ACSC's Secure your social media guide, checked October 2026. Each platform's help centre has the exact steps.

1. Check your profile and remove any public phone number, email address or home address.
2. Look back through older posts and remove identifying details, such as your birthplace or school.
3. Leave out location check-ins and photos that show street signs.
4. Search your name online, and ask for anything that reveals too much to be taken down.
5. Delete or deactivate accounts you no longer use.

Based on the ACSC's Personal Cyber Security: Next Steps and Secure your social media guides, checked October 2026.

1. Check the site lists terms and conditions, a privacy policy and contact details.
2. Pay with a secure payment service such as PayPal, or a credit card.
3. Don't pay by money order, pre-loaded card, or to several different PayIDs or accounts.
4. The ACSC also describes avoiding direct bank deposits and digital currencies, and using a separate card with a low limit for online shopping.

Based on Scamwatch's online shopping alert and the ACSC's online shopping guidance, checked October 2026.

1. Find the store's website yourself, and don't assume the first search result is the real one.
2. Search the store's name together with words like 'review' or 'scam'.
3. Read reviews on other websites, not just the store's own.
4. Be wary of reviews that are all positive with little detail, and of prices far below other sites.

Based on Scamwatch's online shopping alert, checked October 2026.

1. Sign in to the shopping account and open its security or login settings.
2. Turn on two-step verification or MFA if it's offered.
3. If it isn't, use a long, unique passphrase. A password manager can create one.
4. The ACSC also describes being cautious about saving card details in shopping accounts at all.

Based on the ACSC's online shopping guidance, checked October 2026. Each store's help pages have the exact steps.

1. Don't rely on a 'payment received' email.
2. Sign in to the bank or payment account through its official app or website, not a link in the email, and check the money is actually there.
3. If unsure, find the payment company's details on its official website and contact it.
4. Don't send any 'fees' to release a payment.

Based on Scamwatch's guidance for sellers and its phishing guidance, checked October 2026.

1. Don't refund any 'extra' money.
2. Check in your own bank or payment account whether the full amount has actually arrived.
3. Keep payment and messages on the marketplace, using the payment methods it recommends.
4. Scams can be reported to Scamwatch at scamwatch.gov.au/report-a-scam.

Based on Scamwatch's buying and selling guidance, checked October 2026.

1. Use the payment methods the marketplace recommends, and keep messages on the platform.
2. Inspect big-ticket items in person before paying.
3. When paying by PayID or bank transfer, check the name shown matches the person you think you're paying.
4. Don't pay by gift card, crypto, or to several different accounts.

Based on Scamwatch's buying and selling guidance, checked October 2026.

1. Work out which account holds the files, such as an Apple Account, Google Account or Microsoft account.
2. Open that account's security settings.
3. Google: go to myaccount.google.com, select Security & sign-in, then Turn on 2-Step Verification.
4. Apple: open Settings, tap your name, then Sign-In & Security, and check two-factor authentication is on.
5. Other services: look for two-factor or multi-factor authentication in the security settings and follow the prompts.

Based on the ACSC's multi-factor authentication guide and Apple's and Google's instructions, checked October 2026. Menus can change; each provider's guide has the latest steps.

1. Open or select the file or folder in Google Drive and click Share.
2. To remove a person, click the arrow next to their name, then Remove access, then Save.
3. Under General access, click the arrow and choose Restricted.
4. Click Done.
5. Other cloud services, such as iCloud and OneDrive, have their own sharing settings, explained in their help pages.

Based on Google's instructions, checked October 2026. Menus can change between versions; Google's guide has the latest steps.

1. Stop: don't share personal information or act on investment advice from someone met only online.
2. Think: search the person's name, or run their photo through a reverse image search.
3. If unsure about someone, delete and block them.
4. Protect: if money has been invested, contact the bank straight away and report it to Scamwatch.

Based on Scamwatch's online dating and investment scam alert, checked October 2026.

1. Decline investment or money advice from someone met only on a dating app.
2. Search their name, photo or phrases they've used online, to check for scam reports.
3. If there's pressure, stop communicating.
4. Talk it over with friends or family.

Based on Scamwatch's romance scam and online dating alerts, checked October 2026.

1. Don't send money or share personal or financial details with someone met only online.
2. Notice repeated excuses for not meeting in person or using video.
3. If money has been sent, contact the bank as soon as possible and tell the platform.
4. Scamwatch points to Lifeline (13 11 14) for anyone feeling distressed.

Based on Scamwatch's romance scam alert, checked October 2026.

1. Ask for the business's name and Australian financial services (AFS) licence number.
2. Search ASIC's professional registers by name, ABN, ACN or licence number.
3. Check the details match, including any website listed on the register.
4. Contact the company using details you find yourself, not those in the offer.

Based on Moneysmart's Check before you invest page, checked October 2026.

1. Open the Investor Alert List from Moneysmart's Check before you invest page.
2. Search for the company, business or website name.
3. Also search the name online with words like 'scam' or 'review'.
4. Check the licence as well, on ASIC's professional registers.

Based on Moneysmart's Check before you invest page, checked October 2026.

1. Treat a celebrity or politician 'endorsement' as unverified.
2. Search online for scam warnings about the investment.
3. Call the organisation's official phone number to check.
4. Check whether the person offering the investment is licensed, on ASIC's website.

Based on Scamwatch's page on how scammers use technology and AI, checked October 2026.

1. Ask the workplace's IT contact how MFA is set up, as many workplaces manage it centrally.
2. If it's self-managed, open the account's security settings and turn on MFA.
3. Choose a method such as an authenticator app, and follow the prompts.

Based on the ACSC's small business guide, checked October 2026. The workplace's IT contact can confirm the exact steps.

1. Ask a manager or IT contact what the reporting process is.
2. Save the contact details somewhere easy to find, including on paper in case systems are down.
3. Report suspicious emails and possible incidents through that process.
4. For payment requests or bank detail changes, the ACSC describes calling the sender on a known number to check.

Based on the ACSC's small business guide, checked October 2026.

1. Hang up.
2. Don't install any app or give the access the caller asks for.
3. If unsure, find the organisation's contact details on its official website and call it.
4. Report the call to Scamwatch.
5. If access was given, the ACSC describes notifying the bank straight away and changing passwords on important accounts.

Based on the ACSC's remote access scams advisory, checked October 2026.

1. Before typing, take out names, addresses, account numbers, health details and ID numbers.
2. Describe the situation in general terms instead.
3. Read the chatbot's terms and privacy settings to see how what's typed is used.

Based on the OAIC's guidance on commercially available AI products, checked October 2026. The OAIC wrote it for organisations; it explains the same privacy risks.

1. Open the chatbot's settings, often under the profile or account menu.
2. Look for a section about data, privacy or improving the model.
3. Read what each option does and turn off any that aren't wanted.
4. Check the provider's privacy policy or help page, as settings change.

Based on the OAIC's guidance on commercially available AI products, checked October 2026. Each chatbot's settings differ; the provider's help page has the exact steps.

1. Hang up or stop replying.
2. Call the person back on the number you already have for them.
3. Don't reply to messages from a new number claiming to be them.
4. Don't send money until you've confirmed it's really them.

Based on Scamwatch's page on how scammers use technology and AI, checked October 2026.

1. Check the network's name on signage or with staff before connecting.
2. Wait until you're on a trusted home, office or mobile connection for banking and other sensitive tasks.
3. For frequent public Wi-Fi use, the ACSC describes a reputable VPN as an extra layer of protection, after checking its privacy policy and independent reviews.
4. When finished, forget the network in the device's Wi-Fi settings.

Based on the ACSC's public Wi-Fi guidance, checked October 2026.

1. iPhone or iPad: open Settings > Wi-Fi, tap Edit, tap the info button next to the network, and turn off Auto-Join.
2. Mac: open System Settings > Wi-Fi, click Advanced, click the More button next to the network, and turn off Auto-Join.
3. Android: open Settings > Network & internet > Internet, touch and hold the saved network, and tap Forget.
4. Forgetting a public network after use stops the device reconnecting to it by itself.

Based on Apple's and Google's instructions, checked October 2026. Menus can change between versions; the maker's guide has the latest steps.

1. Pack your own charger and cable.
2. Charge from a power point with your own charger rather than a public charging port.
3. Don't use other people's chargers, cables or removable devices such as USB sticks.
4. If something is needed, buy it from a reputable retailer.

Based on the ACSC's security tips for travelling, checked October 2026.

1. Back up each device before leaving, and keep the backup secure at home.
2. Leave behind devices and information that aren't needed for the trip.
3. Check automatic updates are on, and install any waiting updates.

Based on the ACSC's security tips for travelling, checked October 2026.