SC-3278-Scrutton Bland-A4-NHS-Generic-RGB-12pp-FIN

Surge in Social Media and Email Account Hacking Prompts Urgent Security Warnings

Reports of social media and email account hacking surged in 2024, with Action Fraud recording 35,434 cases - an increase from 22,530 in 2023. In response, Action Fraud and Meta have launched a campaign urging the public to strengthen their online security by enabling two-step verification (2SV) on all accounts, as nearly £1 million was lost to hackers last year.

T he main motives behind these hacks include investment scams, ticket fraud, and outright theft of accounts. The Deputy Director of Action Fraud highlighted that hacking remains the most frequently reported cybercrime this year and stressed the importance of taking steps to secure online accounts. He advised users to enable 2SV, use strong and unique passwords, ideally made up of three random words, and never share passwords with anyone else. Meta’s Security Policy Director, noted that cybercriminals are constantly evolving their tactics. Meta is addressing these threats by encouraging two-factor authentication and introducing facial recognition to help users regain access to compromised accounts.

To reduce the risk of falling victim to these attacks, experts recommend:

Common hacking methods include:

On-platform chain hacking: Criminals take over an account and impersonate its owner, often tricking contacts into revealing authentication codes. Once in control, they use the account to promote fraudulent schemes, such as fake investment opportunities or ticket sales. Leaked passwords and phishing: Hackers exploit passwords exposed in data breaches or obtained through phishing attacks. Since many people reuse passwords across different accounts, a single breach can compromise multiple accounts.

Activating 2-step verification on all important accounts, especially email and social media, to add an extra layer of security. Creating strong, unique passwords for each account, using a combination of three unrelated words to make them memorable yet difficult to crack. Reporting suspicious emails by forwarding them to report@phishing.gov.uk and, if you lose money or share financial details, contacting your bank and reporting the incident to Action Fraud.

COUNTER FRAUD | SCRUTTON BLAND | 7

Made with FlippingBook Learn more on our blog