Increasing Cybersecurity Awareness: Online Protection Tips

Cyberattacks aren’t just headline news—they’re hitting everyday people. In February 2024, Bank of America disclosed a ransomware incident that exposed data for more than 55,000 customers, including Social Security numbers, addresses, and credit card details. If a leading institution can be compromised, anyone can.

Consider the broader picture:

47% of U.S. adults have had personal information exposed.
1 in 3 U.S. homes with computers is infected with malicious software.
600,000 Facebook accounts are hacked every day.
Global cybercrime losses are projected to reach $10.5 trillion in 2025.

That’s why cybersecurity awareness matters. This guide explains what cybercrime is, how the dark web works, which scams to watch for, and the steps you can take to stay safe. Where helpful, we’ve linked to trusted resources and EarthLink guides for deeper reading.

What Is Cybercrime?

Cybercrime is any illegal activity that involves computers, networks, or the internet. Cybercriminals exploit weak passwords, outdated software, and unsecured wireless 5g internet connections, along with social engineering to gain access to accounts and devices.

Common targets include:

Personal data: names, SSNs, addresses, phone numbers
Financial accounts: bank logins, credit cards, payment apps
Identity confirmations: driver’s licenses, login credentials, security answers

Why this matters: once stolen, your information can be packaged and sold on dark web marketplaces to the highest bidder. According to federal sources and independent research, about 65% of Americans who go online have received at least one scam offer, and the U.S. is the target of roughly 46% of global cyberattacks.

Learn more: Cybersecurity Awareness overview and statistics in our guide, “Cybersecurity Awareness: How to Protect from Cybercrime” on EarthLink.net.

The Dark Web: What You Need to Know

Think of the internet in three layers:

Surface web: public pages you can find via search engines (e.g., news sites, social media).
Deep web: private content behind logins (e.g., banking portals, company intranets).
Dark web: hidden, encrypted sites accessible with special tools (such as the Tor browser).

What’s on the dark web? Personal data—including SSNs, credit card numbers, and login credentials—often appears in illicit marketplaces. If your details are leaked in a breach, they could be listed for sale within hours.

Key stats to understand the risk:

Dark web marketplace sales reached an estimated $341.7M in 2021.
Tor had more than 2.5M daily users in 2022.
About 56.8% of dark web content is linked to illegal activity.

Important nuance: accessing the dark web isn’t illegal by itself—but buying or selling illegal goods is. Awareness and prevention remain your best defense. For a clear breakdown of the Surface, Deep, and Dark Web, see EarthLink’s explainer “What’s the Dark Web?”

13 Common Internet Scams to Watch For

Scams evolve, but the patterns repeat. Below are the most common schemes—what they are, how to spot them, and how to avoid them. For a quick reference to specific examples, review EarthLink’s “13 Scary Scams on the Internet You Should Beware.”

Phishing & Fake Communications

1. Email phishing

What it is: Deceptive emails mimicking trusted brands (banks, delivery services) that push you to click links or download attachments.
Spot it: Sender address is slightly off; urgent language; mismatched URLs; requests for logins or financial data.
Avoid it: Don’t click links or open attachments from unexpected messages. Go directly to the company website and sign in from there.

2. Fake login pages

What it is: Spoofed websites that look identical to real login pages.
Spot it: URL isn’t quite right; no HTTPS lock icon; odd spelling or formatting.
Avoid it: Type the URL manually or use a saved bookmark. Enable a password manager—it won’t autofill on fake sites.

3. Tech support scams

What it is: Pop-ups, emails, or calls claiming your device is infected; they urge you to call a number or install remote-access tools.
Spot it: Unsolicited alerts; pressure to act quickly; requests for remote access or payment in gift cards/crypto.
Avoid it: Close the pop-up; don’t grant remote access; contact the device maker or your security provider directly. Review EarthLink’s scam overview for warning signs.

4. IRS/government impersonation

What it is: Threatening messages claiming you owe taxes or committed fraud.
Spot it: Demands for immediate payment; requests for gift cards, wire transfers, or crypto.
Avoid it: Government agencies do not demand payment by gift card or threaten arrest via email or text. Verify through official websites.
Note: Phishing is exceptionally effective. Independent research finds that more than 75% of targeted attacks start with a phishing email.

Financial & Shopping Scams

5. Fake investments

What it is: “Guaranteed” high returns or “can’t miss” crypto opportunities.
Spot it: Pressure to invest fast; promises to double your money; limited transparency.
Avoid it: Consult a licensed financial professional you trust. If it sounds too good to be true, it probably is.

6. Online shopping scams

What it is: Fake stores or social ads selling products that never arrive—or arrive as counterfeits.
Spot it: No physical address or customer support; only deep discounts; recent domain registration; no credible reviews.
Avoid it: Research the seller. Use credit cards or payment platforms with buyer protection.

7. Prize or lottery scams

What it is: “You’ve won!” messages; you just need to pay “fees” or “taxes.”
Spot it: You never entered; requests for payment upfront; poor grammar.
Avoid it: Real sweepstakes don’t require upfront fees. Don’t share personal information.

Emotional Manipulation Scams

8. Romance scams

What it is: Fraudsters build a relationship online, then request money for “emergencies.”
Spot it: Refusal to meet or video chat; elaborate stories; urgent requests for funds.
Avoid it: Never send money to someone you haven’t met; talk to friends or family before making decisions.

9. Family emergency (“grandparent”) scams

What it is: Imposters claim to be a relative in trouble (jail, hospital) needing money.
Spot it: Urgency; demands for secrecy; payment by gift cards or wire.
Avoid it: Call the family member directly using a known number to verify.

Account Hijacking & Threat-Based Scams

10. Account lockout notices

What it is: Fake alerts saying your account will be closed unless you “verify” details now.
Spot it: Suspicious sender; links to strange URLs; requests for credentials.
Avoid it: Check your account by visiting the site directly; turn on two‑factor authentication (2FA).

11. Ransomware-style threats

What it is: Messages alleging someone hacked your device and demanding payment to avoid “exposing” you.
Spot it: Claims to have your password; asks for crypto.
Avoid it: Don’t pay. Reset passwords, run security scans, and contact your bank if needed. Consider reporting to the FBI’s Internet Crime Complaint Center (IC3).

12. Business email compromise (BEC)

What it is: Fraudsters pose as executives or vendors to request urgent payments or gift cards.
Spot it: Slightly altered email domains; unusual payment requests; secrecy and urgency.
Avoid it: Verify requests out of band (phone/video). Build payment approval workflows.

13. Delivery and “USPS package” scams

What it is: Texts or emails about missed deliveries or unpaid postage that steal logins or payment info.
Spot it: Unexpected messages; links to unfamiliar tracking sites; requests for small “postage” payments.
Avoid it: Track shipments through official carrier websites. Don’t enter payment details from a link you didn’t request.

Cybersecurity Best Practices: How to Protect Yourself

Strong habits go further than any single tool. Start with these fundamentals:

Use strong, unique passwords

Don’t reuse passwords across accounts.
Use a reputable password manager to generate and store complex passwords.

Enable two‑factor authentication (2FA)

2FA adds a second check (like a one‑time code or authenticator app) that makes stolen passwords far less useful.

Keep devices and software updated

Updates include security patches that close known vulnerabilities attackers exploit.
Turn on automatic updates where possible.

Think before you click

Be wary of links and attachments—even if the message appears to come from someone you know.
When in doubt, contact the sender via a separate channel to confirm.

Monitor accounts and credit regularly

Review bank and credit card statements for unknown charges.
Consider services that include dark web monitoring and breach alerts.

Avoid public Wi‑Fi without protection

Never access sensitive accounts (banking, email, work apps) on open networks—especially if you’re unsure of your internet provider or using shared public Wi-Fi.
If you must, use a trusted VPN to encrypt your connection. Learn about Norton Secure VPN offered by EarthLink.

Be skeptical of unsolicited requests

Don’t share personal or financial data unless you initiated the contact.
Verify the requester through official channels (e.g., call your bank using the number on the back of your card).

Looking for an all-in-one security toolkit? Explore EarthLink Protect and Protect+ for dark web monitoring, VPN, device protection, and more.

What to Do If You’ve Been Targeted or Scammed

Act quickly—speed limits damage.

Step 1: Secure your accounts

Change passwords immediately for affected accounts and any that share similar credentials.
Turn on 2FA wherever available.

Step 2: Contact your bank and card issuers

Report unauthorized charges.
Request new cards and consider temporarily freezing affected accounts.

Step 3: Place fraud alerts with credit bureaus

Contact Experian, Equifax, or TransUnion to add a fraud alert to your credit file. This makes it harder for criminals to open new accounts in your name.

Step 4: Monitor closely

Keep an eye on statements and credit reports for new activity.
Consider credit monitoring if you’ve experienced a breach.

Step 5: Report it

Report identity theft and get a recovery plan at identitytheft.gov.
File a complaint about internet crime with the FBI at ic3.gov.
Report fraud and scams to the FTC at reportfraud.ftc.gov.
If you suspect a broader cyber incident, see CISA’s “Report a Cyber Issue” at cisa.gov/report.

Key Takeaways

Cybercrime is accelerating: breaches, scams, and malware are now everyday risks.
The dark web actively trades stolen data—emails, logins, and SSNs can appear for sale within hours of a breach.
Phishing leads most attacks: deceptive emails and fake login pages trigger the majority of compromises.
Ransomware remains a major global threat, growing in frequency and cost.
Good security habits are your best defense: use strong, unique passwords, enable 2FA, keep software updated, and stay skeptical of unsolicited requests.
If you’re exposed, act fast: reset credentials, monitor accounts, report the incident, and secure your devices.

Conclusion: Stay Smart, Stay Safe Online

Cybersecurity isn’t just an enterprise concern, it’s a daily responsibility for everyone. Recognize the red flags of scams, build strong security habits, and stay alert when you’re online. Small steps add up to big protection.

Need ongoing protection? Compare features in EarthLink Protect and Protect+, including Dark Web Monitoring, VPN, device protection, and identity alerts, so you can spot threats sooner and respond faster.