Mobile security: What it is, plus device protection tips

Technology has made online shopping and banking more accessible. But with technology comes opportunity for scammers. Knowing some mobile security tips can help keep your devices secure and protect your identity. 

What you’ll learn:

• To protect your devices and the information you store on them, it helps to be aware of the different mobile security threats—like malware and phishing—and how to prevent them.

• Using different passwords across various platforms, staying alert when using public Wi-Fi and clearing your phone before you dispose of it are a few ways you can protect your personal information.

• Hackers may try to impersonate your financial institution via email, text or phone to gain access to your accounts.

• If you’re a customer, you can report any suspicious communications that are seemingly from Capital One to keep your information protected.

Mobile security refers to the protection of smartphones, laptops, tablets and other devices from threats to assets and data. Proper protection can help prevent cybercriminals from accessing sensitive information, such as passwords, photos, and financial and personal information.

Some of the most common types of mobile security threats include:

• Malware: A type of software or firmware installed on a device that attempts to steal or gain access to data or disrupt operations.

• Phishing and vishing: Criminals use these scams to trick people into providing personal information by contacting them from what seems like a legitimate business. Phishing scams happen through email, and vishing uses voice calls. 

• Smishing: Smishing is like phishing and vishing, but it comes via text message. Text scams can come from traditional 10-digit phone numbers or short codes like “+1410.” 

• Man-in-the-middle (MitM) attacks: This cyberattack happens when a criminal intercepts communication between two parties. Vulnerable information being exchanged from either party can then be stolen. 

• Network spoofing: Hackers try to manipulate connections to make it seem like a Wi-Fi network is legitimate so users join. From there, they can steal personal information or install malware on the device.

These tips and signs could help you identify and prevent data theft and credit card fraud on your mobile devices.

If a text asks you to click a link, it could be a scammer trying to get you to install malware or give up personal information through a fake sign-in page. That’s why the Cybersecurity & Infrastructure Security Agency (CISA) says not to click on links or attachments that you don’t recognize and delete the message.

Setting a unique PIN on each of your devices can protect them from unauthorized access if your phone is lost or stolen. You could also consider updating your settings so your phone locks after a set period of inactivity. 

You might also use biometric authentication—a way to verify your identity through methods like fingerprint scanning or facial recognition—on your devices and apps for a more secure and streamlined login process.

Hackers may use an even more direct approach—a vishing scam—to access your personal information. Here’s how it happens: A scammer calls to warn you of an issue with your account and asks for your credit card number, debit card number or Social Security number (SSN) to fix the problem. Don’t risk it—call your credit card issuer or bank directly to see whether there’s really an issue. You can find those numbers on the back of your card, in your banking app or on your statement.

If you’re using a device on a public Wi-Fi network that’s not encrypted, you risk exposing your data to hackers who could have set up a fake access point. The Federal Trade Commission (FTC) says you can determine whether a website is secured through encryption if there’s a lock symbol or “https” to the left of the website address. If possible, only connect to protected networks or limit public Wi-Fi use to activities that don’t require you to share personal information.

Another way hackers attempt to access the data on your phone is through potentially malicious apps. If you download one to your mobile device, your personal information could be exposed. These fake apps are sometimes installed by clicking on a link or pop-up ad, but they may also be available in your phone’s app store. Before downloading apps on your phone, the Federal Communications Commission (FCC) recommends researching the developer, reviewing app permissions and comparing the app to the official website to ensure it’s legitimate.

Any data that you store on your phone—like contacts, messages or photos—could be lost or stolen if your phone is ever compromised. You can store this information on a computer, in cloud storage or by using a detachable storage device to keep your files in a separate, secure location.

If you receive a direct message, a follow request or a friend request from someone you don’t know, be careful. Hackers can use social media platforms to “make friends” and ultimately manipulate people into clicking malicious links or giving up personal information. If you don’t recognize the person or the link looks suspicious, don’t respond and delete the message or request.

The FCC recommends keeping your phone updated to potentially reduce your device’s exposure to online security risks. To make sure your phone’s operating system is current, you can opt in to automatic updates. You could also allow update notifications from your operating system provider or device manufacturer. Automatically updating your phone—or accepting these updates when prompted—can keep your phone’s system current.

When it’s time to get rid of your phone, if you don’t erase all your personal information, you could leave yourself vulnerable to identity theft. Everything from your address to your bank info could be visible on your phone when you dispose of it. That’s why the FCC recommends completely wiping your phone and resetting it to its factory settings before you get rid of it. You can refer to the manufacturer’s website or check with your service provider for instructions.

Depending on the manufacturer, your device may have recovery settings that can help you track your phone, lock the device or wipe data remotely if it were ever lost or stolen. If you discover your phone has been stolen, you can report it to local law enforcement. You can then reach out to your service provider to “brick” your phone, which means it can’t be activated on other networks without your permission.

With due diligence and smart mobile security practices, you can reduce your risk of exposure to cybersecurity threats. 

A major target for hackers is your financial information. If you suspect people are posing as Capital One, you can report it through the Suspicious Communications Form. You can also read more about what Capital One is doing to protect your personal and financial information.