5 simple ways to boost your scam self-defences

From fake texts to Facebook Marketplace traps, scams can catch you off guard when you least expect it.
The good news? You don’t need to be a cyber-security expert to boost your scam self-defences. Here are five simple ways to add an extra layer of protection against scammers.
1. Keep your secure codes, secure
Secure codes are typically sent via email or SMS when you log in or make changes to any secure accounts.
Secure codes can go by different names:
- One-time passcode (OTP)
- Verification code
- 2FA code (two-factor authentication)
- Security code
Regardless of the name, they all do the same thing. Protect your account and verify it’s really you logging in.
Scammers want these codes so they can unlock full access, they commonly impersonate well-known organisations and companies from your bank, Amazon, PayPal or even a friend. No legitimate company will ever contact you unexpectedly and ask you to share a code you received.
If you get an unexpected request, it’s a scam.
2. Switch your passwords to passphrases
Still using a simple password for important logins? It’s time to switch to passphrases.
Passphrases are longer, harder to guess, and easier to remember when personalised. They use words or phrases only you would know.
Example: GreenBananaRiverRuns
Avoid using:
- Birthdays
- Pet names
- Anything you’ve shared online
Test how strong your password is with the NSW Government’s password strength checker
3. Use different passwords for every login
Reusing passwords across multiple accounts, increases your risk of being hacked and scammed.
Instead you can:
- Use unique passwords for each account
- Try a trusted password manager
- Set reminders to change them regularly
4. Skip the public Wi-Fi
Free public Wi-Fi sounds convenient, but it’s risky.
Networks in cafés, airports, libraries or shopping centres are common targets for scammers who can intercept your data.
Avoid logging in to important accounts or apps on public Wi-Fi, such as:
- Online banking
- MyGov.au
- Shopping sites
- Social media
Instead use mobile data or wait until you’re on a secure network.
5. Turn on auto app updates
App updates aren’t just for new features. They patch security flaws that scammers look for.
To stay secure:
- Enable auto-updates on all apps
- Install phone and system updates promptly
- Delete apps you no longer use
Need help? Follow these guides:
Remember MyState Bank will never:
- Ask for your PIN or passcode over the phone
- Ask you to read out a secure SMS code
- Tell you to move money to a 'safe' account
- Send an SMS asking you to click a link
If in doubt, always:
Stop. Check. Protect.