The issue of account takeover has emerged as a serious and high-volume threat. It is particularly recognised as an issue across social media platforms and is the most common cyber dependant crime type reported to Action Fraud.

The NCA & NECC have organised a day of action on 17thMarch 2025 as part of the national Stop! Think Fraud campaign.  This campaign aims to increase the use of two step verification (2SV)

What is 2SV?

Two Step verification (2SV) is also known as 2 factor authentication (2FA) or multi-factor authentication (MFA).  provides a way of 'double checking' that you really are the person you are claiming to be when you're using online services, such as banking, email or social media. It is available on most of the major online services. Passwords can be stolen by cyber criminals, potentially giving them access to your online accounts. However, accounts that have been set up to use 2SV will require an extra check, so even if a criminal knows your password, they won't be able to access your accounts.

How to turn on 2SV?

Some online services such as banking will already have 2SV switched on. However most don't, so you will need to switch it on yourself to give extra protection to your other online accounts, the option to switch on 2SV is usually found in the security settings of your account (where it may also be called 'two-factor authentication'). 

When 2SV is switched on, you'll be asked to provide a ‘second step’ in order to access your account. There are several types of second steps available: such as text messages, authenticator apps, backup codes.

How can I help?

You can help by educating yourselves and your communities about the critical role of two step verification (2SV) in safeguarding accounts.  We would like to see 2SV offered on all services which might hold your personal data, spend your money, or play another important role in your life. While many major services do offer it, there are still some that do not. If 2SV is not available on one of your important accounts, like email, you should ensure that it has a strong unique password. You may even want to consider changing services to one that does offer 2-step verification.

The aim is to increase the use of 2SV and ultimately to help combat online fraud.

I’ve been hacked – what can I do?

Report the matter to Action Fraud, detailing as much information as possible. If you have a victim who has had an account hacked, please consider reporting the incident to Action Fraud on their behalf.

More information can be found at:

Cyber Protect Individuals

Cyber Protect advice for Families

Turn on 2-step verification (2SV) - NCSC.GOV.UK

These links can be shared with your friends and family.

Too good to be true? Protecting yourself and others from scams online Webinar

Join West Mercia Cyber Crime Unit who will be discussing the latest fraud types affecting people in the West Mercia area and will provide steps that you can take to protect yourselves, friends and family online.  There will also be an opportunity for you to ask questions relating to your own online safety concerns.  To book onto a session, please click on the links below

4pm Thursday 20th March https://events.teams.microsoft.com/event/e224fdd2-efd6-483b-a5b1-e82e19eb8d7c@dd7d99f4-65c4-4822-bf7b-75d61ebc8f4a

5pm Wednesday 26th March https://events.teams.microsoft.com/event/fca4ca19-a514-4884-8a5a-2fb204894318@dd7d99f4-65c4-4822-bf7b-75d61ebc8f4a