Over 33,600 online accounts hacked in the past year, Action Fraud warns

Action Fraud is urging people to provide an extra layer of protection on their social media accounts and email after more than 33,600 accounts were hacked in the last year.

New data released by the national fraud and cybercrime reporting centre shows that victims lost a combined total of £1.4 million as a result of their online accounts being compromised.

Now Action Fraud is launching an awareness campaign on social media and email account hacking for Cyber Security Awareness Month this year, encouraging the public to protect their online accounts from fraudsters.

It includes using the two-step verification option to help secure their social media and email accounts.

Adam Mercer, Deputy Director of Action Fraud, said: “Cyberattacks and hacking are carried out by faceless cybercriminals who target unsuspecting victims looking to take advantage of unprotected social media and email accounts.

“With this being the top cybercrime reported last financial year, it’s even more important to take action and ensure you lock down your accounts.

“Protect yourself from fraudsters trying to steal or access your valuable information by ensuring your social media and email account passwords are secure. All your passwords should be different and never shared with anyone else.

“If you have the option, enable 2-step verification to ensure you have twice the protection for all your accounts.”

In the reports made to Action Fraud, there were various different methods of hacking reported, including:

On-platform chain hacking

This is when a fraudster gains control of an account and begins to impersonate the legitimate owner.

Action Fraud say that the goal is to convince people to reveal authentication codes that are sent to them via text.

Many victims of this type of hacking believe it’s a friend messaging them, but the shared code was associated with their own account and the impersonator can now use it to access their account.

Usually when an account is taken over, fraudsters willmonetise control of the account via the promotion of various fraudulent schemes, while impersonating the original account owner.

Leaked passwords and phishing

The other predominant method of hacking reported is leaked information used from data breaches, such as leaked passwords, or account details gained via phishing scams.

This becomes prevalent as people often use the same password for multiple accounts, so a leaked password from one website can leave many of their online accounts vulnerable to hacking.

What can you do to avoid being a victim?

Action Fraud are encouraging people to follow the below advice to help secure their accounts and reduce their risk of falling victim to hackers.

• Use a strong and different password for your email and social media accounts. Your email and social media passwords should be strong and different from all your other passwords. Combining three random words that each mean something to you is a great way to create a password that is easy to remember but hard to crack.
• Turn on 2-Step Verification (2SV) for your email and social media accounts. 2-Step Verification (2SV) gives you twice the protection, so even if cyber criminals have your password, they can’t access your email or social media account. 2SV works by asking for more information to prove your identity. For example, getting a code sent to your phone when you sign in using a new device or change settings such as your password. You won’t be asked for this every time you check your email or social media.
• If you live in England, Wales and Northern Ireland and have been a victim of fraud or cybercrime, report it at www.actionfraud.police.uk or by calling 0300 123 2040. In Scotland, victims of fraud and cybercrime should report to Police Scotland on 101.