Lock Down Your Shopping and Payment Accounts

    Make the account boring to a credential-stuffing attacker.

    What to do

      • Use a unique password stored in a password manager
      • Turn on 2FA — authenticator app over SMS where possible
      • Remove cards you don't actively use and use virtual card numbers for the ones you keep
      • Set 'require password for purchase' if the marketplace offers it
      • Review and revoke third-party app connections (Amazon, eBay, etc.)

    More from Financial Recovery

    No image

    Avoid Future Recovery and 'Refund' Scams

    Victim lists are sold and reused — assume more 'agents' will appear.
    No image

    Cut Off and Report a Recovery-Scam Contact

    Engagement is the product; ending the conversation is the win.
    No image

    Spot a Stolen-Funds 'Recovery' Scam

    Recovery-scam pitches all share the same red flags — confirm before doing anything.