Cybersecurity for Beginners in Bangladesh: How to Protect Facebook, Gmail, Mobile Banking and Personal Data

1 What Is Cybersecurity and Why Does It Matter in Bangladesh?

Cybersecurity means protecting computers, smartphones, online accounts, networks and personal information from unauthorized access, misuse, damage and digital attacks. It includes both technical protections and everyday habits that help prevent online fraud.

Common cybersecurity threats faced by everyday users

• Phishing: Fake messages or websites designed to steal passwords, OTPs or personal information.
• Account takeover: Someone gains unauthorized access to Facebook, Gmail or another online account.
• Mobile financial fraud: Scammers manipulate users into sharing PINs, OTPs or approving unauthorized transactions.
• Malicious applications: Untrusted apps may collect information, display harmful content or misuse device permissions.
• Password attacks: Criminals use stolen, reused or easily guessed passwords to access accounts.
• Identity misuse: Personal photos, phone numbers or documents may be misused for impersonation or fraud.

Why personal cybersecurity is important

A compromised account can expose private conversations, photographs, contacts, business communications and recovery information. If the same password is reused across multiple services, one stolen password may put several accounts at risk.

Mobile financial services and digital banking also require careful protection. A fraudulent transaction, SIM-related incident or social-engineering attack can cause financial loss and create difficulties when trying to recover access.

2 Phishing Attacks and Common Online Scams in Bangladesh

Phishing is a type of social-engineering attack in which criminals pretend to be a trusted person, organization or service to trick users into revealing confidential information or taking an unsafe action.

Common phishing examples

How to identify a suspicious message

• It creates panic or demands immediate action.
• It asks for your password, PIN, OTP or recovery code.
• The website address looks different from the official service.
• The sender uses an unfamiliar number, email address or social media profile.
• It promises prizes, guaranteed income or unusually attractive offers.
• It asks you to install an unknown application or share your screen.

What should you do?

1. Do not click the suspicious link.
2. Do not download attachments from unknown senders.
3. Open the official app or manually type the service's known website address.
4. Contact the organization through its independently verified support channel.
5. Report and block the suspicious sender where appropriate.

3 How to Protect Your Facebook Account from Hacking

Facebook accounts contain personal photographs, conversations, contact information, business pages and connections. Criminals may target accounts to impersonate users, request money from friends, distribute fraudulent links or take control of connected business assets.

Essential Facebook security settings

• Use a strong, unique password that is not used on other websites.
• Enable two-factor authentication.
• Review where your account is logged in and remove unfamiliar sessions.
• Keep your recovery email address and phone number updated.
• Review connected apps and remove services you no longer use.
• Use privacy settings to control who can see your personal information.

Enable Facebook two-factor authentication

1. Open Facebook and go to Settings & privacy.
2. Open Accounts Center.
3. Select Password and security.
4. Choose Two-factor authentication.
5. Select your Facebook account.
6. Choose an available authentication method and complete the setup.
7. Secure any recovery codes provided by the service.

Facebook menu names and available authentication methods may change. Follow the current instructions shown in your account.

What to do if your Facebook account is hacked

• Use Facebook's official hacked account recovery page.
• Try recovery from a device and browser you previously used.
• Secure the email account connected to Facebook.
• Change reused passwords on other services.
• Review recent posts, messages, connected apps and login sessions.
• Inform friends if your account has been used to send suspicious messages or money requests.

4 Gmail Security: Protect Your Google Account and Personal Information

Your Gmail account may be connected to social media, online banking notifications, cloud storage, mobile applications, password recovery and important personal documents. Losing access to Gmail can therefore affect many other digital services.

Important Gmail and Google account security practices

• Use a unique and strong Google account password.
• Enable Google's two-step verification.
• Add a recovery phone number and recovery email address.
• Review devices signed in to your Google account.
• Check recent security activity for unfamiliar events.
• Remove suspicious third-party application access.
• Keep your phone, browser and security settings updated.

Review your Google account security

1. Visit Google Account Security.
2. Review your recent security activity.
3. Check the devices currently connected to your account.
4. Enable two-step verification if it is not already active.
5. Verify your recovery phone number and email address.
6. Review third-party apps and services with account access.

How to recover a lost Gmail account

If you cannot sign in, use Google's official Account Recovery page. Follow the instructions and provide the information requested by Google.

Recovery is generally easier when you have access to your recovery phone or email and can use a familiar device, browser and location. Never pay an unknown person who claims they can guarantee recovery of your Google account.

5 Two-Factor Authentication (2FA): An Essential Layer of Account Protection

Two-factor authentication, also called 2FA, adds an additional verification step when signing in. Instead of relying only on a password, the service asks for another form of proof that you are the account owner.

Common authentication methods

Why 2FA matters

If someone obtains your password through phishing or a data breach, a properly configured second authentication factor can make unauthorized access more difficult.

Best practices for 2FA

• Enable 2FA on your primary email, Facebook and important financial accounts wherever supported.
• Prefer passkeys, security keys or authenticator apps where available and suitable.
• Never share verification codes with another person.
• Keep recovery codes in a secure location separate from your everyday phone.
• Do not approve an unexpected login request.
• Remove old devices and authentication methods you no longer control.

6 Strong Passwords and Password Manager Best Practices

Weak and reused passwords are common reasons online accounts become vulnerable. A password that is easy to guess or has already appeared in a data breach may allow criminals to attempt access to other services.

How to create a strong password

• Use a long password or passphrase that is difficult to guess.
• Use a different password for every important account.
• Avoid names, birthdays, phone numbers and predictable patterns.
• Do not use the same password for Facebook, Gmail and financial services.
• Change a password immediately if you suspect it has been exposed.
• Use a password manager to create and store unique passwords.

What is a password manager?

A password manager securely stores passwords and can help generate strong, unique credentials for different websites. Examples include Bitwarden and 1Password. Review each provider's security features, recovery process and pricing before choosing one.

Password security mistakes to avoid

• Writing passwords in an unprotected note or sharing them through chat.
• Saving passwords on a shared or public computer.
• Using one password for several accounts.
• Sending passwords to someone who claims to be technical support.
• Keeping default passwords on routers and devices.

7 Smartphone Security: Protect Android and iPhone Devices

Smartphones contain personal photographs, messages, contacts, financial applications, authentication tools and access to online accounts. If a phone is lost, stolen or infected with malicious software, several types of personal information may be exposed.

Essential smartphone security settings

• Use a strong screen lock, PIN or password.
• Enable fingerprint or face authentication where appropriate.
• Keep Android, iOS and applications updated.
• Install apps from trusted official stores.
• Review camera, microphone, location, SMS and contact permissions.
• Enable the device-finding and remote-lock features available on your phone.
• Back up important information securely.

Android security recommendations

• Use Google Play Protect and keep it enabled.
• Avoid installing APK files from unknown websites or messaging groups.
• Review apps with accessibility, notification and device-administrator permissions.
• Remove applications you do not recognize or need.
• Do not grant unnecessary permissions to simple applications.

iPhone security recommendations

• Keep iOS updated.
• Use a strong device passcode.
• Enable Find My iPhone.
• Review Apple Account devices and trusted phone numbers.
• Be careful with configuration profiles and unfamiliar links.

What if your phone is lost or stolen?

1. Use the official device-finding service to locate, lock or erase the phone when appropriate.
2. Contact your mobile operator to block the SIM if necessary.
3. Contact your financial service providers if payment accounts may be exposed.
4. Change important account passwords from a trusted device.
5. Review active sessions and revoke access from the lost device.
6. Report theft to the appropriate authorities where necessary.

8 Safe Mobile Banking in Bangladesh: bKash, Nagad and Other Financial Services

Mobile financial services make sending and receiving money convenient. However, users must protect their account PINs, OTPs, SIM cards and transaction information. Fraudsters often use fake support calls, impersonation and social engineering rather than directly breaking into a financial platform.

Mobile banking safety rules

• Never share your PIN or OTP with anyone.
• Never approve a transaction you did not initiate.
• Verify the recipient's number before sending money.
• Use only official applications and verified service channels.
• Check transaction notifications and account history.
• Keep your phone and SIM card physically secure.
• Contact the provider immediately if you notice an unfamiliar transaction.

Common mobile financial fraud examples

What to do if you suspect mobile banking fraud

1. Contact the relevant financial service provider immediately using its official support channel.
2. Ask about securing or temporarily restricting the affected account.
3. Record transaction IDs, times, amounts and relevant messages.
4. Contact your mobile operator if SIM compromise is suspected.
5. Change exposed credentials using the provider's official process.
6. Report suspected criminal activity to the appropriate authorities.

Official service information: bKash | Nagad

9 Account Recovery Preparation: Be Ready Before You Lose Access

Many people think about account recovery only after losing access. Preparing recovery information in advance can make it easier to prove ownership and restore access through the official recovery process.

Prepare your recovery information

• Keep your recovery email address active and accessible.
• Keep your registered phone number under your control.
• Store recovery codes securely and privately.
• Maintain access to a trusted authentication method.
• Keep your important account details and service information organized securely.
• Know the official recovery website for each important service.

Useful official recovery links

• Google: Google Account Recovery
• Facebook: Facebook Hacked Account Recovery
• Microsoft: Microsoft Password Reset
• Apple: Apple Account Recovery

Important recovery precautions

Use the official recovery process instead of trusting social media pages or unknown individuals who promise guaranteed account recovery. Never send your password, OTP, recovery codes or identity documents to an unverified person.

10 Safe Internet Browsing, Public Wi-Fi and Website Security

Browsing habits can expose users to fraudulent websites, fake downloads, malicious advertisements and credential theft. A website that looks similar to a trusted service may still be controlled by a criminal.

Safe browsing practices

• Check the complete website address before entering login information.
• Use bookmarks for frequently visited financial and email services.
• Do not trust a website only because it displays a padlock or HTTPS.
• Avoid downloading software from unknown websites.
• Keep your browser updated.
• Do not save passwords on public or shared computers.
• Log out of accounts after using a shared device.

Public Wi-Fi security

Public Wi-Fi in restaurants, airports, shopping centres and other locations may be insecure or impersonated by attackers. Avoid sensitive transactions on networks you do not trust. If you must use public Wi-Fi, verify the network name with the venue and use HTTPS websites and trusted applications.

How to recognize suspicious websites

• Unusual spelling or extra characters in the domain name.
• Unexpected redirects to unrelated websites.
• Requests for unnecessary personal information.
• Unfamiliar payment pages or unusual payment instructions.
• Unwanted downloads or repeated security warnings.

11 Protect Personal Data, Photos, Documents and Digital Identity

Personal information can be misused for impersonation, social engineering, fraudulent account creation and targeted scams. Information that seems harmless individually may become sensitive when combined with other details.

Information you should protect

• National ID information and document photographs.
• Banking details, mobile financial service information and transaction records.
• Personal phone numbers, addresses and family details.
• Private photographs, identity documents and personal conversations.
• Passwords, authentication codes and recovery information.
• Workplace documents, customer information and confidential business records.

Social media privacy recommendations

• Limit the visibility of personal information on social media.
• Review who can see your posts and contact details.
• Be careful when posting travel plans or real-time location information.
• Do not publish identity documents or sensitive financial information.
• Review tagged posts and public photographs periodically.

Back up important information

Keep secure backups of important photographs, documents and personal files. Use trusted cloud storage or encrypted external storage, and protect access with strong authentication. Make sure you can recover your backup if your phone or computer is lost.

12 Cybersecurity Awareness for Families, Students and Everyday Internet Users

Online safety is not only an individual responsibility. Family members, students and less-experienced internet users may need help identifying fake messages, suspicious applications, impersonation and online harassment.

Simple cybersecurity rules for families

• Never share passwords or OTPs with friends or strangers.
• Do not click unknown links received through messages or social media.
• Tell a trusted person if someone requests money or private photographs.
• Do not meet unknown online contacts without appropriate safety precautions.
• Use privacy settings and think carefully before posting personal information.
• Report threatening, fraudulent or abusive online activity.

For students and young internet users

Students should be especially careful about fake scholarships, job offers, online courses, gaming rewards and social media impersonation. Do not pay registration fees or share identity documents without verifying the organization and its official communication channels.

For parents and guardians

Discuss online safety regularly and encourage children to report suspicious or uncomfortable interactions. Explain why private information should not be shared with strangers and how to block and report harmful accounts.

13 What to Do After a Cybersecurity Incident or Online Fraud

If you suspect that an account has been compromised, money has been transferred without permission or personal information has been exposed, act quickly. Avoid panic and follow a structured response.

Immediate response checklist

1. Secure your primary email: Change its password from a trusted device if you suspect it has been compromised.
2. Change exposed passwords: Replace compromised or reused passwords on other accounts.
3. Revoke unauthorized sessions: Sign out unfamiliar devices and remove suspicious application access.
4. Protect financial accounts: Contact your bank or mobile financial service provider immediately if financial access may be affected.
5. Secure your SIM: Contact your mobile operator if you suspect SIM theft, replacement fraud or loss of service.
6. Preserve evidence: Save relevant messages, phone numbers, transaction IDs, screenshots and timestamps.
7. Report the incident: Contact the relevant platform, financial provider and appropriate authorities.

Where to seek help in Bangladesh

Depending on the incident, contact the official customer-support channel of the affected platform or financial service provider. For suspected criminal activity, seek guidance from the Bangladesh Police or the appropriate cybercrime reporting authority. For financial fraud, notify the relevant bank or mobile financial service provider without delay.

Official resources: Bangladesh Police | Bangladesh Bank | bKash

Important things to remember

• Do not delete evidence before preserving relevant details.
• Do not pay an unknown person who promises to recover stolen money or accounts.
• Do not continue communicating with suspected scammers.
• Do not use the compromised device for sensitive password changes until it is checked and secured.

14 Complete Cybersecurity Checklist: 30 Steps to Protect Your Digital Life

Use this practical checklist to review your personal cybersecurity. You do not need to complete everything at once. Start with your primary email, Facebook account, smartphone and financial services.

Account security

• Use unique passwords for important accounts.
• Enable two-factor authentication wherever available.
• Update recovery email addresses and phone numbers.
• Review active login sessions regularly.
• Remove unknown connected applications.
• Store recovery codes securely.

Facebook and Gmail protection

• Check Facebook login activity.
• Enable Facebook two-factor authentication.
• Review Google security activity.
• Enable Google two-step verification.
• Verify account recovery options.
• Bookmark official account recovery pages.

Mobile and device security

• Use a secure phone lock.
• Install operating system updates.
• Install applications only from trusted sources.
• Review application permissions.
• Enable device-finding features.
• Back up important files.

Online banking and fraud prevention

• Never share financial PINs or OTPs.
• Verify recipient numbers before sending money.
• Check transactions through official applications.
• Avoid suspicious payment links.
• Verify sellers before making advance payments.
• Keep financial service contact information available.

Privacy and browsing habits

• Check website addresses before signing in.
• Avoid unknown links and attachments.
• Limit personal information shared publicly.
• Log out from shared computers.
• Report suspicious activity quickly.
• Review your security settings every month.