FIN-CSIRT / Knowledge base

Learn to recognise risk.

Clear explanations and practical steps for safer use of accounts, devices, and financial services.

If an incident has already happened

Choose what you need to protect first.

Report an incident

Choose a starting point

How would you like to begin?

Explore a specific risk, or follow a short route selected for your role or situation.

Explore by topic

Choose the risk you want to understand.

Follow a suggested route

You do not need to read the full library in order. These short routes collect the most useful first lessons for a common situation.

For individuals

Start with the messages, accounts and payments you use every day.

For employees

Reduce risk when working with messages, documents, devices and AI tools.

For finance teams

Verify the request, recipient and changed instructions before approving money.

An incident has happened

Limit harm first, then preserve evidence and report the event.

Messages and manipulation

Spot a scam

Check a message, call or offer before sharing information, sending money or approving a request.

10 guides

01 / 39 Phishing Recognise messages that impersonate a trusted person or organisation to steal information, deliver malwa... 02 / 39 Phone and text scams Recognise a fraudulent call or text, verify the request through another channel, and act if you have alr... 03 / 39 Fake websites and QR codes A QR code hides its destination until scanned. Check the address before signing in, paying or downloadin... 04 / 39 Fake CAPTCHA prompts and dangerous commands A fake “I am not a robot” check can trick you into running a malicious command yourself. Learn what a re... 05 / 39 Impersonation, deepfakes and social media A voice, video or familiar profile is no longer sufficient proof of identity. Verify unusual requests th... 06 / 39 Threatening messages and digital extortion A message may claim the sender has a recording, password or private information and demand payment. Pres... 07 / 39 Avoiding financial scams Three checks to help you assess a financial offer before sharing information or sending money. 08 / 39 Identity theft Recognise possible misuse of your personal information and know who to contact when something looks wron... 09 / 39 Online shopping scams Check the seller, offer and payment terms before buying goods online. 10 / 39 Prize draw scams Recognise a fake prize notification before sharing personal details or paying a fee.

Everyday protection

Protect accounts and devices

Build habits that reduce risk and learn what to do if an account or device is compromised.

20 guides

11 / 39 Account security and recovery settings by service Practical steps for Gmail, Outlook, Apple, Facebook, Instagram and WhatsApp, including sign-in checks, d... 12 / 39 Android: updates, backups and a missing phone Find Android security controls, check your backup and prepare for losing or handing over your phone. 13 / 39 iPhone: protect data and respond to a missing phone Practical steps for iPhone updates, iCloud backup, Lost Mode and erasing a device before sale. 14 / 39 Windows 11: updates, backups and device protection Find Windows 11 updates, threat checks and backups, and prepare for a lost computer or a planned handoff... 15 / 39 Mac: updates, Time Machine backups and device handoff Find macOS updates, prepare a verified backup and distinguish protecting a lost Mac from erasing it for... 16 / 39 Strong, unique passwords Why each important account needs its own password and how a password manager can help. 17 / 39 Two-factor authentication (2FA) Learn how an extra identity check helps protect your accounts and how to turn it on. 18 / 39 SIM swapping and phone-number takeover A sudden loss of mobile service may be a fault or an unauthorised SIM change. Learn what to verify first... 19 / 39 What to do after a data breach Confirm what was exposed, protect reused passwords and expect targeted messages that exploit information... 20 / 39 Fake apps and remote access Check an app and its permissions before installation, especially when an unknown caller wants access to... 21 / 39 Selling, donating and repairing devices safely A phone or computer holds accounts, photos and financial information. Prepare it so the next owner or re... 22 / 39 Sharing cloud files safely A document link can remain accessible longer than expected. Check recipients, permissions and access dur... 23 / 39 Using AI tools safely AI tools can help with work, but confidential inputs, broad permissions and unchecked outputs introduce... 24 / 39 Updates, backups and ransomware Reduce risk with security fixes and separated backups; if ransomware is suspected, first limit its sprea... 25 / 39 A safer home network and router Change the administrator password, enable supported encryption and updates, and review connected devices... 26 / 39 Using public Wi-Fi safely Understand the risks of public Wi-Fi and the checks that help protect your accounts, information and pay... 27 / 39 Urgent help: money, account or phone at risk Choose the first steps for your situation, contact the right provider and preserve useful information fo... 28 / 39 What to do if your account has been hacked Steps to regain access, limit harm and protect accounts connected to a compromised login. 29 / 39 Recovering an infected device Recognise signs of infection, follow a recovery process and reduce the chance of the problem returning. 30 / 39 How to stay safer online Two practical steps to protect your email and the important accounts connected to it.

Money and transactions

Protect money and business

Check the banking channel, recipient and business request before approving a transaction.

9 guides

31 / 39 Contacting your bank safely Find official banking channels and check an unexpected call, message or request before acting. 32 / 39 Safe mobile banking Protect the phone, app access and payment approvals, and know what to do if the device is lost. 33 / 39 Payment cards and contactless payments Check the terminal amount, keep control of the card, and act immediately if it is lost or an unknown tra... 34 / 39 Investment and crypto scams Recognise a fake broker, a promise of guaranteed returns and a demand for another payment to release sup... 35 / 39 Refund and recovery scams After one scam, a false offer to recover your money may follow. Recognise requests for an advance fee, f... 36 / 39 Using an ATM safely Simple checks to help protect your card, PIN and money when using a cash machine. 37 / 39 Business email compromise (BEC) Recognise fraudulent business payment requests and verify them before money or confidential information... 38 / 39 International invoice fraud Check changes to payment details before paying an overseas supplier or business partner. 39 / 39 What is a money mule? Recognise offers that recruit people to move criminal funds and know how to respond.

Official incident channel

Report a security incident.

Send the information you have through the FIN-CSIRT incident form. You can add supporting files before submitting.

Report an incident