Simple cyber smart tips for every Kiwi

It’s easy to think that cybercrime is a problem for big-city businesses or tech-savvy folks. But the reality is, it's happening right here in our regional communities, and it's affecting everyone from local businesses to our own grandparents.

According to New Zealand's National Cyber Security Centre (NCSC), a staggering $5.7 million was lost to cyber incidents in just three months between April and June 2025.

With Cyber Smart Week kicking off from 6-12 October, now is the perfect time to brush up on some simple ways to protect ourselves, our businesses, and our whānau online.

You don’t need to be a tech genius to stay safe. Putting a few straightforward habits in place can make a huge difference.

Here are five easy steps you can take today.

1: Be click-smart – think twice

We’ve all received those emails or texts that look a bit fishy. The sender might be pretending to be from a bank, a government agency, or even a courier service, creating a sense of urgency to get you to act fast. Scammers are experts at making things look legitimate, but a little caution goes a long way.

Here’s how to outsmart them:

• Hover over links: Before you click on any link in an email, hover your mouse over it to see the actual web address it will take you to. If it looks strange or doesn't match the sender, don't click it.
  

• Be wary of urgent requests: Scammers often try to rush you into giving away sensitive information. If an email demands immediate action or threatens you with consequences, take a breath and investigate further.
  

• When in doubt, check directly: If you receive a suspicious message from a company or person you know, don't reply to the message. Instead, contact them through a phone number or email address you know is legitimate to verify the request. A quick phone call can save you a lot of trouble.

2: Use unique passwords and multi-factor authentication (MFA)

Using the same password for everything is like having one key for your house, your car, and your office. If a thief gets that key, they have access to everything. The same goes for your online accounts.

• Create strong, unique passwords: A strong password should be at least 12 characters long and include a mix of uppercase and lowercase letters, numbers, and symbols. More importantly, use a different password for each of your accounts.
  

• Use a password manager: Remembering dozens of complex passwords is a tall order. A password manager can securely store all your passwords and even help you generate new, strong ones. It’s a lifesaver.
  

• Enable multi-factor authentication (MFA): MFA adds an extra layer of security by requiring a second form of verification, like a code sent to your phone. It’s one of the most effective ways to stop unauthorised access to your accounts.

3: Always install software updates

Those little pop-ups telling you to update your software can be annoying, but they are your best friends in the fight against cybercrime. Updates often contain crucial security patches that fix vulnerabilities hackers could otherwise exploit.

• Install security updates immediately: Don't put them off. The sooner you update, the sooner you’re protected.
  

• Enable automatic updates: Most devices and applications offer the option to update automatically. Turn this feature on so you don't have to think about it.
  

• Keep everything updated: This includes your computer’s operating system, your web browser, and all the apps on your phone and computer.

4: Lock down your Wi-Fi

Your Wi-Fi network is the gateway to your digital world, so it's important to secure it.

• Avoid public Wi-Fi for sensitive tasks: Free Wi-Fi at a café may be great for browsing, but avoid using it for banking, online shopping, or logging into work accounts. These networks are often unsecured, making it easy for criminals to snoop on your activity.
  

• Use a VPN: A virtual private network (VPN) encrypts your internet connection, creating a secure tunnel for your data. It's a must-have if you work remotely or frequently use public Wi-Fi.
  

• Change your router's default password: When you get a new internet router, it comes with a default username and password. Change it immediately to something unique and strong.

5: Back up your data

Imagine losing all your family photos, important documents, or business files in an instant. It’s a scary thought, but regular backups can ensure that never happens.

• Follow the 3-2-1 rule: For businesses, this is the gold standard. Keep 3 copies of your data on 2 different types of media (like a hard drive and cloud storage), with 1 copy stored offsite.
  

• Automate your backups: Set your devices to back up automatically so you don’t forget.
  

• Test your backups: Occasionally check that your backups are working correctly and that you can restore your files if needed.
  

Taking your security to the next level

While these tips are a fantastic start for everyone, businesses can go a step further. At Yorb, we’ve adopted the Australian Signals Directorate (ASD) Essential 8 framework. It’s a set of eight practical strategies designed to prevent most cyberattacks.

While our Yorb Defender clients enjoy round-the-clock protection, the Essential 8 provides a great roadmap for any business looking to strengthen its defences.

For more great resources, check out Own Your Online. This Cyber Smart Week they’re offering a quick scam check tool, alerts on the latest scams, and helpful how-to guides. They’re also running a series of free webinars during October, covering topics from online safety for older people to protecting small businesses.

Share the knowledge

Cybersecurity is a team sport. Not everyone knows how to protect themselves online, especially those people in our community who may not be as familiar with the latest scams.

Think about who in your community you could help by sharing this information. A simple conversation could be all it takes to keep a friend, family member, or neighbour safe from a costly and stressful cyberattack.

Let's work together to make our community cybersmart.