Help that doesn't cost anything.
A shortlist of genuine, free, mostly-government-run tools and services worth knowing about, whether or not you ever become a Sfinco client. We only link out to the real thing, nothing here is a Sfinco product in disguise.
Scams & fraud
Where to check a scam, report one, or get help if your details have already been used.
Scamwatch
Run by the ACCC. Report a scam and see what's currently trending across Australia.
Visit scamwatch.gov.au →IDCARE
Australia's free national identity and cyber support service, if your details have been compromised.
Visit idcare.org →Australian Cyber Security Hotline
The government's main number for cybercrime and online scams, any time.
Call 1300 292 371 →Have I Been Pwned
Check whether your email address has turned up in a known data breach.
Visit haveibeenpwned.com →Targeting Scams report
The National Anti-Scam Centre's own annual data on what's actually costing Australians money, and who's being targeted.
Visit scamwatch.gov.au →Keep Scam SAFE
National Seniors Australia's ongoing campaign and simple framework for pausing before acting on anything unexpected.
Visit nationalseniors.com.au →ReportCyber
The government's official portal for reporting a cybercrime, hack, or security vulnerability, separate from reporting a scam through Scamwatch.
Visit cyber.gov.au/report →ACSC Alert Service
Free email alerts from the Australian Cyber Security Centre when a significant new threat or scam is doing the rounds.
Visit cyber.gov.au →Passwords & accounts
The single biggest upgrade most people can make is using a different password everywhere. These make that realistic.
Bitwarden
A password manager with a genuinely free plan, so you can stop reusing the same password everywhere.
Visit bitwarden.com →Your phone's built-in password manager
Google Password Manager on Android, or Passwords (iCloud Keychain) on iPhone. Already on your phone, free, and does the basics well.
Find your device below →Google Authenticator / Microsoft Authenticator
Free apps that add a second step to your logins, so a stolen password alone isn't enough to get in. Search for either by name in your phone's app store.
ACSC: creating secure passphrases
The government's own advice on using a handful of random words instead of a complex-but-forgettable password. Longer beats trickier.
Visit cyber.gov.au →Family & seniors
Resources built for exactly the audience Sfinco cares most about, and for parents keeping an eye on younger family members too.
eSafety Commissioner
Australia's online safety regulator, with guidance written specifically for older Australians as well as young people.
Visit esafety.gov.au →Moneysmart
ASIC's plain-English guide to money and scam safety, no financial jargon required.
Visit moneysmart.gov.au →Small business
Free government guidance that pairs naturally with a Sfinco SMB Cyber Audit.
ACSC Essential Eight
The government's baseline checklist for protecting a small business, written for owners, not IT teams.
Visit cyber.gov.au →Notifiable Data Breaches scheme
What you're legally required to do if customer data is exposed, from the Office of the Australian Information Commissioner.
Visit oaic.gov.au →Your devices
Official security settings from the people who actually built your device. The Sfinco Safety Guides walk through these step by step, but the official pages are free right now.
iPhone & Mac
Apple's official support site covers passcodes, Face ID, Apple ID, and iCloud security.
Visit support.apple.com →Windows
Microsoft's official support site covers Windows Hello, Windows Defender, and account security.
Visit support.microsoft.com →Android
Google's official support site covers your Google account, app permissions, and Play Protect.
Visit support.google.com →Malwarebytes
A well-regarded tool for scanning and removing malware that's already made it onto a device. Free to use for cleanup, a step up to the paid version if you want ongoing real-time protection too.
Visit malwarebytes.com →Money & banking
Not financial advice, just where to look and who to call.
Moneysmart
ASIC's guide to spotting investment scams and protecting your super, in plain English.
Visit moneysmart.gov.au →Your bank's official fraud line
Save it in your phone under a name you'll recognise, using the number on the back of your card, never a number from a text message.
More on spotting scam messages →Browsing a little more privately
None of this requires becoming a different kind of internet user, just a couple of free swaps and one setting worth turning on.
DuckDuckGo
A search engine that works like any other, just without building a profile of everything you've ever searched for.
Visit duckduckgo.com →uBlock Origin
A free browser extension that blocks intrusive ads and the invisible trackers that follow you between websites. Install it once and mostly forget it's there. Full version for Firefox, a lighter version for Chrome.
Visit ublockorigin.com →Turn on HTTPS-Only Mode
A single setting, built into both Firefox and Chrome, that makes sure your browser always uses the encrypted version of a website when one exists. Free, already there, worth switching on today.
Firefox
A free browser built by a non-profit, with stronger default privacy protections than most and no ad business sitting behind it.
Visit firefox.com →Just for interest
This one isn't a safety tool, it's just a genuinely interesting thing to look at. The numbers move fast and look dramatic, but that's mostly automated scanning traffic bouncing around the internet, not a sign anything's wrong with your own devices.
Fortinet Threat Map
A live, moving map of cyberattack traffic being detected around the world, from Fortinet's FortiGuard Labs. Purely for curiosity, nothing here requires you to do anything.
Visit fortiguard.fortinet.com →Kaspersky Cyberthreat Live Map
A spinning 3D globe tracking detected threats in real time, with a running tally of which countries are seeing the most activity right now. Same idea as the Fortinet map, different view.
Visit cybermap.kaspersky.com →Check Point Live Cyber Threat Map
A flat world map with a running daily counter of attacks detected, ticking up in real time. A good one to leave open in the background just to see the number climb.
Visit threatmap.checkpoint.com →Cloudflare Radar
Less flashy than a map, more genuinely real-time: a live dashboard of global internet traffic and attack trends from one of the internet's biggest infrastructure providers.
Visit radar.cloudflare.com →Something missing, or a link gone stale?
This list is kept short on purpose so it stays trustworthy. If you know a genuinely free, legitimate resource that belongs here, or spot a broken link, let us know.
Start with a conversation
Send through a few details and you'll hear back personally, usually within a couple of business days.
Prefer to reach out directly?
- hello@sfinco.com.au
- Location
- Noosa, Sunshine Coast, Queensland (remote-first, Australia-wide by arrangement)