一、保護帳戶和裝置1. Protect accounts and devices
先保護電郵帳戶Protect your email account first
電郵通常是其他帳戶重設密碼的入口。電郵密碼必須獨有，不要與任何其他服務共用；開啟2SV，並把復原代碼存放在安全、非公開的位置。不要把唯一一份復原資料只放在同一部手機內。
Email is often the route used to reset other accounts. Give it a unique password, enable 2SV, and keep recovery codes somewhere secure and private. Do not keep your only recovery copy on the same phone.
鎖好裝置及保留復原方法Lock devices and retain a recovery route
- 手機、平板及電腦使用PIN、密碼或生物辨識鎖。
- 啟用官方「尋找我的裝置」功能，並記下怎樣由另一部裝置登入。
- 只從官方應用程式商店下載程式；不明來歷的附件或安裝檔不要開。
- 定期更新路由器；管理員密碼不要沿用出廠預設或其他帳戶密碼。
- Use a PIN, password or biometric lock on phones, tablets and computers.
- Enable the official “find my device” feature and know how to access it from another device.
- Install apps only from official app stores; do not open unexpected attachments or installers.
- Keep the router updated and do not reuse a default or account password for router administration.
二、遇到可疑電郵、短訊或網站2. Suspicious emails, texts or websites
即使訊息聲稱來自銀行、GOV.UK、速遞公司或親友，也應自行開啟已知的官方應用程式，或手動輸入你知道的網址核實。不要用訊息提供的電話號碼。
Even if a message claims to be from a bank, GOV.UK, a courier or a relative, verify it through a known official app or an address you type yourself. Do not use the phone number supplied in the message.
轉寄給 NCSCForward it to the NCSC
轉寄至 report@phishing.gov.uk，然後刪除。不要再按當中的連結或附件。
Forward it to report@phishing.gov.uk, then delete it. Do not use its links or attachments.
免費轉寄至 7726Forward free to 7726
大部分英國流動網絡可用7726舉報可疑SMS；依網絡商回覆提供發送者號碼。
Most UK mobile networks accept suspicious SMS reports at 7726; follow your provider's reply to submit the sender's number.
向 NCSC 舉報網址Report the URL to the NCSC
複製網址但不要開啟或登入，再使用NCSC官方舉報表格（英文）。
Copy the address without opening or signing in, then use the NCSC's official reporting form.
立即聯絡銀行Contact your bank immediately
用銀行卡背面、官方應用程式或自行查得的號碼聯絡銀行；英格蘭、威爾斯及北愛爾蘭再向Report Fraud（英文）舉報，蘇格蘭則聯絡Police Scotland。
Use the number on your card, the official app or a number you found independently; then report to Report Fraud in England, Wales or Northern Ireland, or Police Scotland in Scotland.
三、帳戶疑似被入侵：按次序處理3. If an account may be hacked
用官方復原頁面取回帳戶Recover it through the provider
由你自行輸入的官方網址或已安裝的應用程式開始；不能登入便聯絡服務供應商。
Start from an official address you type or the installed app; contact the provider if you cannot sign in.
檢查電郵轉寄與過濾規則Check forwarding and filter rules
攻擊者可能建立自動轉寄或隱藏安全通知的規則；刪除你不認識的設定。
Attackers may add forwarding or filters that hide security messages; remove settings you do not recognise.
更改被盜及重用的密碼Change compromised and reused passwords
先改電郵，再改銀行及其他共用同一密碼的帳戶；每個帳戶使用獨有密碼。
Start with email, then banking and any account sharing that password; use a unique password for each.
登出所有裝置及應用程式Sign out all devices and apps
在安全設定終止其他登入工作階段、撤銷不明應用程式權限，再開啟2SV。
End other sessions, revoke unfamiliar app access, then enable 2SV.
更新、通知及檢查交易Update, warn contacts and check transactions
更新裝置和應用程式；通知聯絡人不要理會由你帳戶發出的可疑訊息，並檢查銀行及購物帳戶。
Update devices and apps, warn contacts about suspicious messages sent from your account, and review bank and shopping accounts.
四、電話、寬頻或停電前的離線準備4. Prepare offline for phone, broadband or power outages
斷網不一定是網絡攻擊，亦可能由停電、設備故障、惡劣天氣或工程引起。不要只依賴雲端、WhatsApp或手機內的資料。
Loss of connectivity is not necessarily a cyber attack; it may be caused by power loss, equipment failure, severe weather or engineering work. Do not rely only on cloud services, WhatsApp or information stored on one phone.
📋 紙本聯絡資料Printed contacts
打印家庭、學校、工作地點、醫療服務、能源公司及網絡供應商號碼；每人錢包或書包放一份。
Print family, school, work, medical, energy and telecoms contacts; keep a copy in each wallet or school bag.
📍 集合點及離線地圖Meeting points and offline maps
約定家附近及區外兩個集合點。預先下載所需地圖；GPS可能仍可定位，但地圖資料必須已下載。
Agree nearby and out-of-area meeting points. Download maps in advance; GPS may still locate you, but map data must already be available.
🔋 後備電力Backup power
保持合規充電寶和所需電線有電，定期檢查。不要把充電寶長期放在高溫、潮濕或逃生通道。
Keep a compliant power bank and the right cables charged and checked. Avoid heat, damp and escape routes when storing it.
📻 FM收音機FM radio
準備電池式或手搖FM收音機與後備電池，把本地及全國頻道寫在紙上。
Keep a battery or wind-up FM radio, spare batteries, and local and national frequencies written on paper.
現在便向供應商查詢停電或網絡中斷時的後備安排，並把方法告訴照顧者。停電可致電105；有即時生命危險則嘗試999或112。如你的電話或網絡不能使用，應按預先計劃利用另一部電話、可用網絡或安全地點求助。
Ask providers now about backup arrangements and share the plan with carers. Call 105 for a power cut; for immediate danger try 999 or 112. If your phone or network is unavailable, use another phone, an available network or a safe help point identified in advance.
五、真的需要買什麼？5. What is actually worth buying?
先完成上面的免費設定，再盤點家中物品。大部分家庭只需要補足少量實用品：
Complete the free actions first, then audit what you already own. Most households need only a few practical additions:
- 合規充電寶及正確電線：容量按家庭裝置需要選擇，定期充電及檢查。
- 電池式或手搖FM收音機：停電或流動數據中斷時接收官方廣播。
- 紙本記事簿及防水文件袋：存放聯絡資料、集合點、保單與必要帳戶復原資料的安全副本。
- 可選的離線備份：加密外置儲存裝置可作第二份重要文件備份，但不是人人都需要。
- A compliant power bank and correct cables: size it for household devices, charge it and inspect it regularly.
- A battery or wind-up FM radio: for official broadcasts when power or mobile data is unavailable.
- A notebook and waterproof document pouch: for contacts, meeting points, insurance details and securely stored recovery information.
- Optional offline backup: encrypted external storage can hold a second copy of key files, but is not essential for everyone.
至少保留一項不依賴手機、同一電郵帳戶、雲端或家中電力的備用方法。真正有用的是「多一條路」，不是買最多器材。
Keep at least one backup that does not depend on the same phone, email account, cloud service or household power. The goal is another route—not more gadgets.