Cyber Security
Eight tips to help keep your information safe online.
Crimes in the jewelry industry don’t always have to be violent or forceful. Some savvy criminals have taken to cyberspace: Instead of stealing your physical inventory, they’re opting to target your bank account or hard drive directly. By using lies and manipulation, these criminals—known as “phishers”—use e-mails that appear to come from legitimate sources, such as your bank. They ask you to provide sensitive information, and many people will unknowingly comply and hand over this information without thinking twice.
Avoid falling victim to a phishing attack by following these tips:
1. Never click on unsolicited e-mail links, especially if they are asking for sensitive information. Be mindful anytime an e-mail communication asks for bank or personal information, or asks you to confirm your password.
2. Be wary of messages that impose threats if you fail to respond.
3. Hover over links to view the destination of the URL before clicking; the URL may be directing you to a phony website. If you’re ever directed to go to your bank’s website, do not click on the e-mail link, but instead open a new browser window and type in the appropriate web address on your own.
4. If a website requests sensitive information, check to see that it uses encryption. You can tell if a website is using encryption if “https” is in the URL or you notice a padlock icon in your browser. If you question the legitimacy of a request via e-mail, research the number of the company and call it to verify the request. Do not use the contact number provided in the e-mail, as it may be part of the scam.
5. Never download files or open attachments if you suspect the email is phishing. These documents could be programmed to access your hard drive.
6. Be cautious on all devices, not just your physical computer. Phishing isn’t limited to just e-mails; it may also target you on your phone with phony text messages and automated calls.
What if it wasn’t your bank, but a trusted friend or colleague asking for sensitive information via e-mail? Some criminals engage in the highly targeted practice of “spear phishing,” which makes these e-mails appear nearly authentic. Although spear phishing is more difficult to defend against, these tips can help thwart the phishers:
7. Be mindful of public information on your website—or even social media—which can give criminals more information to make their attacks seem more realistic. Be watchful of how many details you are posting on social media, including pictures of your premises or information about upcoming trips.
8. If a subject line from a “friend” appears off, call the friend or send a separate e-mail asking if that suspicious e-mail is legitimate.
Due to the nature of phishing attacks, an insurance policy will typically not cover them. Most policies contain a False Pretense exclusion, meaning you will not receive coverage when the covered property has been voluntarily parted with through any fraudulent scheme, trick, device, or false pretense.
This makes it increasingly important for you to stay vigilant when handling your sensitive information online.
Founded by jewelers in 1913, Jewelers Mutual (JM) remains the leading insurer solely dedicated to insuring jewelry and the jewelry industry. MJSA has exclusively endorsed Jewelers Mutual Insurance Company’s commercial and personal jewelry insurance products. For more safety and security tips, to to JewelersMutual.com.
Additional Resources
Reporting phishing http://www.consumer.ftc.gov/articles/0003-phishing
Examples of phishing https://securelist.com/analysis/quarterly-spam-reports/69932/spam-and-phishing-in-the-first-quarter-of-2015/