Tips to safe online shopping
The Star (20 Dec 2011)

Tips to shop online safely from PayPal and CyberSecurity Malaysia.

AS online shopping burgeons across the globe, so do cyber crimes, claiming victims at alarming rates, Malaysians included.

The Norton Cyber Crime Report 2011 calculates the cost of global cyber crime at US$114bil (RM363bil) annually, and based on the value victims surveyed placed on time lost due to their cybercrime experiences, an additional US$274bil (RM873bil) was lost, according to a report on www.net-security.org.

To create awareness among Malaysians on the potential risks in online shopping, PayPal – an e-commerce service that handles payments and money transfers via the Internet – and Cyber Security Malaysia have launched Safe Online Shopping Month this December, with the following tips for online shoppers:

- Audit, audit, audit: Complete an audit of where your details are held online and on your mobile devices, and delete anything that is unnecessary. Remove yourself from old mailing lists and consolidate your details using trusted tools to store your personal financial information securely. Always think twice before entering details online – never click "remember my details" on sites, and ensure that your privacy settings are activated on social networking sites.

- Employ password etiquette: Using an obvious password like "password" or the name or birthday of a family member is a very common mistake. Instead, use a strong password which includes a combination of upper and lowercase letters and numbers. Tier your passwords depending on the sensitivity of the information you are sharing, never auto save your passwords on websites, and change them every few months. Finally, never keep your personal information documented in any one place on your computer.

- Beware of phishing emails: If you're not sure if an e-mail is legitimate, don't click on links in the e-mail, don't enter your username or password, and don't give out your financial details. Online payment platforms will never ask you to divulge your sensitive information via email. They will require you to securely login to your account first before asking for more info. Always open a new browser and type in the URL of the company's website before entering your personal details.

- Protect your digital footprint and use a digital wallet when transacting online: It's easy to get carried away shopping for gifts online as you jump from one online store to the next. Avoid sharing personal information online where possible. Using PayPal – you never have to enter your financial information online, letting you shop safely and securely this festive season.

- Browse safely, look for trusted sites: Always look for the padlock icon on sites before entering your account information and password. Also look for websites that start with "https" as they provide an additional layer of encryption often used for online payment transactions and for sensitive transactions in corporate information systems.

- Check your e-statements: Go online regularly and look at electronic statements for your credit card, debit card, and PayPal accounts. Make sure you don't see any fraudulent charges. If you do see something wrong, address the matter quickly. In the case of credit cards, don't pay the bill until you know all your charges are accurate.

Mobile shopping safety

- Lock and password protect your phone: It's the most important thing you can do to ensure security on your mobile device. Use a PIN/password on your device and set it to time-out so it locks automatically. Set your maximum number of incorrect password submissions to no more than three. In addition, use a digital wallet that does not store your sensitive financial info on the mobile device. If your phone is lost or stolen, thieves won't be able to access your personal information and accounts.

- Beware of smishing: It starts with a simple SMS (text) message from a sender trying to bait you to divulge your personal information. The "hook" to capture your personal information is in a URL you link to, or a phone number which prompts you for your personal details, credit card number, PIN or other personal information. Some examples of smishing messages are: "We're confirming you've signed up for our spa service. You will be charged RM2/day unless you cancel your order on this URL." Or, "(name of popular online bank) is confirming that you have purchased a RM100 item from (name of popular company). Visit www.(name).com if you did not make this online purchase." Never click on such links or call a number if you suspect you've received a smishing text. Instead, call the number you have on file for your financial institution.

- "APP-ly" common sense: When choosing apps to download, use common sense. Purchase or download apps from well-known, reliable companies or do your research – such as checking reviews – before downloading an app from an unknown source. Use the most up-to-date version of an app. Unknown or repackaged apps can be armed with malware able to steal details from a user's phone.

- Install updates ASAP: When you receive an upgrade notification on your mobile device, install it immediately. Whether it's an operating system update, or an updated app, install it. With every upgrade, providers are closing security gaps which can make your device more vulnerable to security breaches. – Brought to you by PayPal