FOLLOW US

With mobile apps like Robinhood and Acorns making it easier for people to invest in stocks through their phones, cybercriminals are finding the low hanging fruit quite easily.

Cybersecurity experts say the boom in online stock trading has created a parallel opportunity for hackers. Even the most diligent traders can fall victim to the increasingly sophisticated tactics of today’s digital thieves.

“Cyber hacking has now become the biggest threat to investors’ financial well-being,” said Andrew Stoltmann, a Chicago-based lawyer and former president of the Public Investors Advocate Bar Association. “Unfortunately, brokerage firms haven’t invested the money needed in order to keep cyber hacking of brokerage accounts from happening.”

How are cybercriminals pulling it off?

Gone are the days when a prince from some foreign land emails you asking for short-term financial help in exchange for half of his wealth. Instead, cybercriminals are turning to more realistic "phishing" emails. These emails are designed with information tailored to you but are easily accessible through public records. They are made to look like they are coming from real, established companies or from friends or family members. They are often laced with links or have some kind of call-to-action, encouraging you to share personal financial information.

Other tactics include fake WiFi networks, set up in public places, and given names that sound credible like that of a nearby business. If logged in to one of these WiFi networks, the thieves can begin to ransack your connected system.

So what can you do?

“Any of us could have our brokerage account hacked if we do not take precautions to protect ourselves,” said Mark McCreary, chair of the privacy and data security practice group at Fox Rothschild, a law firm based in Philadelphia.

Digital traders are encouraged to change their passwords frequently and avoid unfamiliar WiFi networks. They should be sure to have two-factor authentication enabled. This process requires a secondary code to sign in. The secondary code is often sent to a mobile phone or email to alert the trader just in case the account is being hacked remotely.

Most importantly, it helps to be paying more attention to the whirlwind of emails, texts, and other messages that flood our devices.

“Frankly, none of us are completely immune to an effective phishing email, simply because we may be distracted,” McCreary wrote in an email.

Can you get your money back?

McCreary advises investors who think their accounts are compromised to immediately notify their brokers. Brokers may be able to track down where funds were wired and reverse the transfer.