Why cyber awareness matters more than antivirus
20 September 2026
The uncomfortable truth
Almost no consumer fraud begins with a hacker defeating software. It begins with a polite voice, an urgent message, and a victim who authorises the theft themselves — approving a collect request, reading out an OTP, installing "support" software. Firewalls cannot interpose on trust. Only awareness does.
Who gets targeted, and why
- Elders: savings, politeness toward authority, unfamiliarity with UPI reversibility. The "bank manager" and "KYC" calls hunt here.
- Children: gaming currency, free-skin lures, and impersonation in chat. The currency is small; the harvested parent credentials are not.
- Job seekers and newlyweds: hope is the hook — task-job deposits, NRI rishtas, rental advances. High emotion suppresses verification.
The family drill (20 minutes, once)
- The PIN rule: nobody — bank, police, relative, app — ever needs your UPI PIN, OTP, or CVV. Say it aloud together until it sounds obvious.
- The safe word: one family word for genuine emergency money requests. "Hi Mum, new number" dies on contact with it.
- The pause rule: any unexpected money or document request waits 10 minutes and gets a callback on a known number — never the caller's.
- The forward rule: scam messages get forwarded to the family group as warnings, with the link checked first in our scam-link scanner.
Awareness compounds
One aware family member protects the whole group chat: grandparents forward less, children ask first, everyone recognises the script. Technology helps — run the breach check and phone-risk score — but the drill is the firewall that can't be uninstalled. Read your country's threat landscape together tonight; it takes less time than one episode of anything.