As we prepare for the peak of the Christmas and New Year festivities, the Cyber Security and Forensics Association of Uganda (CSFAU) extends its heartfelt season’s greetings. While homes fill with joy and digital transactions soar, we must recognise that this period also marks the “peak season” for cybercriminals. Cybercriminals use predictable tactics, relying on urgency and emotional manipulation.
We highlight the most critical threats anticipated: Sophisticated phishing and smishing attacks. This is the most common entry point for fraud. Scammers send deceptive communications-via email (Phishing) or SMS/text message (Smishing)-to steal credentials or install malware. Festive Lures: Look out for fake messages impersonating delivery services asking for small “re-delivery fees,” or urgent communication from banks claiming your account has been suspended and needs immediate password verification.
The deception: The goal is to trick you into clicking a link that leads to a fraudulent site designed to capture your Mobile Money PIN, bank login credentials, or national ID details. Mobile money fraud and social engineering. The high volume of mobile money usage makes it a prime target. Scammers exploit trust by using “social engineering.” A criminal calls you, pretending to be a representative from your Mobile Network Operator (MNO) or a family member in an emergency, asking you to quickly approve a transaction, reverse an error, or share a secret code. These tactics pressure you to act without thinking, leading to direct theft from your account or the compromise of your SIM card. Remember: MNOs will never call and ask for your PIN or approval code.
Unsecured public Wi-Fi Networks. Many Ugandans travel or visit public spaces like hotels, cafes, and airports. Connecting to free, unsecured Wi-Fi poses a significant risk. Criminals can easily monitor the data passing through these networks or set up “rogue access points” (fake Wi-Fi hotspots). If you check your bank balance or make an online purchase on such a network, your sensitive data is exposed and vulnerable to interception. To ensure a digitally secure holiday, every Ugandan is urged to implement these practical, high-impact security measures: 1. Adopt the “Pause and Verify” rule. If a message (email, SMS, or call) creates urgency or demands sensitive information, pause.
Do not click the link or provide the details. Instead, independently verify the request by navigating to the official website of the organisation or calling their official, published customer service number. Do not use any contact details provided in the suspicious message. Activate Multi-Factor Authentication (MFA). MFA requires a second layer of verification (like a one-time code sent to your phone) in addition to your password. Enable MFA on every critical account: your email, social media, and especially your mobile money and banking applications. Protect your devices with updates. Software updates often contain critical security patches that close loopholes criminals exploit.
Before the holidays, ensure all your devices-smartphones, tablets, and computers-have their operating systems (Android, iOS, Windows) and applications fully updated. Separate sensitive activity from public Wi-Fi. Never conduct banking, make Mobile Money transfers, or log into sensitive accounts while connected to free, public Wi-Fi. Alternative: Use your MNO’s data bundle (3G/4G/5G) for financial transactions, as it offers a much more secure, encrypted connection. Manage your digital footprint. While enjoying the holidays, be mindful of what you share online. The responsibility of cybersecurity is shared. By enhancing personal awareness and following these simple yet powerful steps, every Ugandan can significantly reduce their risk of becoming a victim.