October is Cybersecurity Awareness Month. Each year, the federal Cybersecurity and Infrastructure Security Agency uses it to remind people that online security is everyone's job. This year, a lot of that work comes down to keeping up with artificial intelligence.
Scammers used to give themselves away with clumsy, typo-ridden emails. AI has mostly fixed that for them. Criminals now use AI tools to write polished phishing messages and copy real company websites.
According to the Federal Trade Commission, they can even clone a loved one's voice from a short audio clip posted online. The good news is that a few steady habits still protect you very well.
“Like I tell everybody, cybersecurity is a cat-and-mouse game,” said Carlos De la Uz, Information Security Officer at Tropical Financial Credit Union. “Threat actors are always changing their tactics, so we all have to stay one step ahead.”
Lock Down Your Accounts
Strong account security is your first line of defense.
“One of the biggest things consumers can do is use multifactor authentication whenever it's available and avoid reusing the same password across multiple accounts,” De la Uz says. “I also recommend using a password manager so you can create strong, unique passwords without having to remember every one.”
Multifactor authentication (MFA) asks for a second proof of identity, such as a code sent to your phone or a face scan. With MFA on, a stolen password alone isn't enough to get into your account.
CISA's step-by-step guide shows how to turn it on. Start with your email, banking, shopping and social media accounts, since those are the ones criminals want most.
A few more habits help:
“At the end of the day, training and awareness go a long way in protecting your identity online,” De la Uz says.
Know the Warning Signs
AI-generated scams can look real, so trust your instincts when something feels off.
“If you receive an email, text or notification about something you weren't expecting, that's your first red flag,” De la Uz says. “Maybe it's saying you applied for a loan when you didn't, or asking you to click a link for something that doesn't make sense. Today, threat actors are using AI to create emails and websites that look almost identical to the real thing, so it's important to slow down and question anything that seems out of the ordinary.”
Other signs your identity may be at risk include:
Urgency is a scammer's favorite tool. A real financial institution will never pressure you to move money immediately or ask for your full password or one-time passcode.
“If you're ever unsure, don't click the link. Contact the company directly using a phone number or website you know is legitimate,” De la Uz says.
If It Happens to You
Even careful people can be targeted. What matters most is how fast you respond.
“The first thing is don't panic, but act quickly,” De la Uz says. “Contact your financial institution immediately so they can help secure your accounts and guide you through the next steps. If you think an email or message is suspicious, don't interact with it—call and verify it first.”
After contacting your credit union, think about these next steps:
“At the end of the day, the sooner you report something, the better chance you have of limiting the damage,” De la Uz says. “Cybersecurity is all about staying one step ahead, and that includes responding quickly when something doesn't look right.”
Tropical Financial is Here to Help
If something about your account doesn't look right, contact Tropical Financial Credit Union right away using the phone number on the back of your card or on our official website. Do not trust anyone who asks you to click a link or share passwords, PINs, or one-time security codes, even when caller ID shows the institution’s name. Hang up and call TFCU at 888-261-8328. To learn more, visit the TFCU Security and Safety webpage below.