Cyber Safety- What to Know

By Angela Bowman

My email was hacked- what do I do now? 

If you believe your email account has been compromised, it is important to act quickly. A fast response can help limit the damage, protect your contacts, and reduce the chance of further unauthorized access. 

• Change your email password immediately. 
• Notify important contacts right away so they do not respond to any suspicious messages sent from your account. 
• Check your “sent” folder for messages sent without your knowledge. 
• Review your email settings for forwarding rules to make sure no one is receiving copies of your messages. 
• After the immediate issue is contained, review your security settings and recovery options, including whether you have a backup email address on file. 
• Turn on Multi-Factor Authentication (MFA) for your email and any other online accounts. This adds an extra layer of protection through a text message, code, or authentication app.

I received a call from the IRS… a “friend”…a grandchild… a bill collector…

Scam calls often rely on panic, urgency, and now even AI generated voice fakes to pressure people into acting before they have time to think. The most important thing to remember is to pause, stay calm, and verify the request before sharing information or sending money.

• Take a breath and stop to think before responding to any urgent request. Remember that scammers try to create fear and urgency.
• If the caller claims to be a friend or family member, hang up and call them back using a number you already know or one saved in your contacts.
• Do not call back the most recent number if you are unsure who it belongs to.
• If they say they are from the IRS, hang up. The IRS does not call to demand immediate payment.
• If the caller claims to be a bill collector, write down the details and call the organization back using a verified phone number from an old bill, official website, or trusted source.

I clicked on a link and let someone into my computer. 

If you believe someone gained access to your computer, act quickly to limit the damage and protect your accounts. These situations often begin with scams involving fake tech support, pop-up virus warnings, internet or utility company calls, bank or credit card fraud alerts, online shopping or delivery issues, or even someone claiming to be from the government. The safest approach is to stop using the device, secure your most important accounts from a different trusted device, and get help to make sure the computer is safe before using it again. 

• Disconnect the computer from the internet right away by turning off Wi-Fi or unplugging the network cable. 
• Use a different, trusted device to change the passwords for your email, bank, and other important accounts, especially if you reuse passwords. 
• Turn on Multi-Factor Authentication (MFA) for any account that offers it as a best practice. 
• If you entered financial information or accessed bank or investment accounts, contact those institutions immediately and ask them to watch for fraud or help secure your accounts.
• Prioritize checking, savings, and any account that allows online transactions or transfers. 
• Do not continue using the computer for sensitive activity until it has been checked. 
• Have a reputable local professional run a full scan, update security software, and remove any unfamiliar remote-access programs or browser extensions. 
• As a best practice, make sure the computer and its security software are fully updated before returning to normal use.

What else can I do to stay protected? 

There are a few important things you can do at home to reduce risk and strengthen your everyday security. These best practices can help protect your devices, your internet connection, and the accounts you use most. 

• Change the default password on your internet router and any internet-connected device in your home, and use a strong, unique password. 
• Use a guest Wi-Fi network for visitors and, if possible, for smart home devices so they are separated from your main network.
• Turn on Multi-Factor Authentication (MFA) for email, financial accounts, and any other important online services that offer it. 
• Keep your computer, phone, tablet, router, and apps updated so security fixes are applied as soon as they are available. 
• Use strong, unique passwords for each site or app, and consider a password manager to help store them securely. 
• Be cautious with links, pop-ups, and unexpected messages, including emails and text messages, even if they appear urgent or familiar. 

Use these tips to help identify suspicious emails and text messages: 

• Be cautious if the message is unexpected, especially if it creates urgency or pressure. 
• Check whether you know the sender and whether the email address or phone number looks correct. 
• Look for misspellings, grammar issues, generic greetings, or wording that does not sound like the company or person the message claims to be from. 
• Be suspicious of links, attachments, or requests to log in, verify information, send money, or share passwords or verification codes. 
• If you are unsure, do not click. Contact the company or person directly using a phone number, website, or contact method you already know is real. 
• Review the list of devices connected to your home network from time to time, and remove any old or unfamiliar devices. 
• Never share your passwords, verification codes, or login information with anyone.

How do I know my account at Trust Company of Vermont is safe?

TCV follows established cybersecurity practices designed to protect client information and keep systems secure. We provide ongoing cybersecurity awareness training to our employee-owners, work with trusted technology consultants and providers to maintain and update our systems, and use layered safeguards such as controlled access, system monitoring, and regular security reviews. We also conduct annual penetration testing and independent IT audits, and maintain cybersecurity insurance as part of our overall risk management approach.

Online access to your account is protected by multifactor authentication and is view-only. In the event that your credentials were hacked, or your device was compromised, assets could not be transferred out of your account. We only distribute assets to known, linked bank accounts of our clients. Our employee-owners always verify the identity of the person requesting the funds and we will never distribute to a third party or unknown bank account without your verbal confirmation. We take great pride in being a steward for our clients’ assets and the many controls in place to ensure your funds are safe.

Cyber threats continue to evolve, but adopting a few simple habits, and making it your regular practice to pause, verify, and ask questions when something feels off, can go a long way. If you are ever unsure about an email, request, or account activity, please reach out to Trust Company of Vermont. We are always happy to help you think it through and protect what matters most.