It’s no secret that scammers are waiting to take advantage of online security vulnerabilities, and a single stolen password, compromised computer, or fraudulent payment request can result in significant losses for your local business. The good news is that protecting your business doesn’t need to be overly complex. 

Key Takeaways:

1. Upgrade any Windows 10 computers to the current Windows OS.
2. Turn on Multi-Factor Authentication (MFA) anywhere offered, especially online banking and email.
3. Verify payment changes and unusual payment requests before sending money; especially to unknown or unverified sources.

Here are eight actionable steps you can start using today to enhance your business’s online privacy:

1. Update to the latest version of your computer's operating system.
   Unsupported computers are less likely to receive regular security updates, increasing vulnerability to attacks from newly discovered security threats. Support for Windows 10 products ended on October 14, 2025, and we suggest upgrading to a supported version as soon as possible to deter future attacks. If your computer is unable to upgrade, consider recycling or disposal to avoid additional privacy risks. You can also avoid missing out on future updates by enabling automatic updates on your computer.
   
   
2. Keep your other devices updated. 
   Like your computer, outdated software and apps on other devices can contain known security weaknesses that criminals can exploit to gain access to your business. We recommend turning on automatic updates for your phones, browsers, and other important applications, too. Keep reputable anti-virus software or endpoint protections enabled and updated as well. Taking these steps can help improve your overall defenses against fraud.
   
   
3. Turn on Multi-Factor Authentication (MFA). 
   One stolen password can give online criminals direct access to your email, banking, and other business accounts. Multi-Factor Authentication (MFA) provides your business an additional layer of protection even when a password is compromised. We strongly encourage you to enable MFA whenever available, but especially on business banking, email, and other important accounts. 
   
   
4. Use strong, unique passwords. 
   Reusing passwords across platforms is risky business that can end up costing you in big ways. If you are reusing passwords, a breach on one website can potentially give criminals access to your online accounts at other places – including websites where your business's financial information is stored. To prevent this from happening to you, consider using a unique password for each platform; especially online banking. It may also be helpful to utilize a password manager app to organize and store multiple entries. Please remember to never share your online passwords or MFA codes with anyone.
   
   
5. Know the signs of phishing. 
   A convincing email, text message, or phone call can trick even the savviest employees into revealing credentials, installing malicious software, or sending money. Be cautious of unexpected messages, links, attachments, and requests for passwords or urgent action – especially if the communication is unexpected or from someone you don’t know. When in doubt, contact the person or business directly using a verified method of communication.
   
   
6. Verify payment changes. 
   Criminals and hackers often impersonate business owners, employees, customers, and vendors in an attempt to redirect payments. Recovering funds lost in this way can be incredibly difficult and sometimes impossible. Before sending money or making payment changes, double check where you are sending the money to and have a trusted employee or representative review any unusual or large payments whenever possible.
   
   
7.  Turn on banking alerts. 
   The longer fraudulent activity goes unnoticed, the more significant the losses can be to your business. We recommend enabling any available transaction, login, and security alerts through your business banking services and be sure to review your account activity regularly. If you notice any unexpected or suspicious charges, report them immediately.  
   
   
8. Protect your phone. 
   A lost or stolen phone can provide criminals access to your business email, banking, and any other sensitive accounts or information stored on your phone – especially if it is not properly secured. You can take the following steps to improve your smartphone’s security:

a. Use a passcode or biometric lock.
b. Keep the operating system and apps updated.
c. Never share device passcodes.
d. Avoid accessing sensitive accounts over unsecured networks or public Wi-Fi whenever possible. 

Protecting your small business’s privacy doesn’t need to be complicated or confusing. Sometimes the best way to protect yourself is being aware of and vigilant about the different forms of fraud and how to identify them.

Taking these simple steps today can significantly reduce the chance hackers and other criminals have to access your accounts and defraud you. For additional fraud prevention resources and alerts, please visit our Fraud Prevention Center here. And if you are a DCCU small business owner with questions about your account, please click here to contact our Business Accounts Department.