Stay Safe Online
Cyberbullying, passwords, fake profiles and protecting your family — practical online safety in Khmer
ប្រទេសកម្ពុជាមានអត្រាការបោកប្រាស់តាមអ៊ីនធើណេតខ្ពស់ជាងគេ។ ទាំងនេះជាជំនាញដែលការពារអ្នក គ្រួសារ និងអនាគតរបស់អ្នក។

Personal & Private Information
Not all information carries the same risk. Passwords, ID numbers and bank details are private — never share them.
Scammers use information from Facebook to target victims. They know your name and family before the scam begins.
Once posted online, you cannot take it back.
- Passwords — ever, to anyone
- National ID or passport number
- Bank or card details
- Photos of ID documents
- Your home address
• Before posting, ask: could this help a scammer target me?
• Treat any request for personal information online as a red flag

Cyberbullying
Cyberbullying is bullying through phones, social media or online games — spiteful comments, rumours, sharing photos without permission.
It is not harmless. It is not the victim’s fault. It does not go away on its own.
1 in 3 young people globally has experienced it. Girls are disproportionately affected.
- Spiteful comments about appearance or intelligence
- Spreading lies or rumours
- Sharing embarrassing photos without permission
- Fake profiles created to mock someone
- Deliberately excluding someone from group chats
• Screenshot everything as evidence
• Block the person and report to the platform
• Tell a teacher, parent, or trusted adult

Passwords
A weak password can be cracked in seconds. The most common: ‘12345678’, ‘password’, ‘admin’, your date of birth.
Strong passwords — 12 characters, mixed — take 35,000 years to crack. A passphrase (3 unrelated words) is even better.
Don’t share passwords with friends or family. It’s your data you are protecting.
- At least 12 characters — or 3 unrelated words
- Mix uppercase, lowercase, numbers, symbols
- Never use your name, birthday, or ‘password’
- Different password for each important account
- Never share — with anyone
• Enable 2FA as a second layer of protection (see below)
• Use Google Password Manager — free, built into Chrome

Two-Factor Authentication (2FA)
A strong password alone is not enough. If stolen, the attacker is in immediately.
2FA adds a second step — a code from your phone. The attacker does not have this.
Two methods: SMS (code by text) or Google Authenticator (app). The app is more secure.
- Facebook: Settings → Security and Login → Two-Factor Authentication
- Gmail: Google Account → Security → 2-Step Verification
- Use Google Authenticator app — better than SMS
- Save your backup codes somewhere safe
• Download Google Authenticator from the Play Store
• See our full guide: Google Authenticator — How to Set It Up

Facebook & Fake Profiles
Fake profiles use stolen photos and convincing stories. Scammers spend weeks building trust before the scam begins.
They may appear as a foreign professional, romantic interest, job recruiter, or a cloned version of someone you know.
- Profile created recently
- Few friends, mostly from other countries
- Photos look like stock images
- Quickly becomes very friendly or romantic
- Cannot or will not video call
- Asks you to keep the relationship secret
• Never accept friend requests from people you don’t know
• Set Facebook to Friends Only
• If something feels wrong — block and report immediately

Scams in Cambodia
Four scams are particularly common right now. All begin on Facebook, Telegram or WhatsApp. All promise something too good to be true.
• No legitimate employer asks you to pay to get a job
• Never send money to someone you have only met online
• Report scams: Cambodian Police 031 201 2345

Protecting Your Family
Your parents did not receive digital safety education. This makes them vulnerable.
You are the most important source of digital safety your family will ever have.
- How to spot a fake profile or scam message
- Never send money to someone met only online
- Set Facebook to Friends Only — do it together
- Never click links in messages from strangers
- If something feels wrong — ask you first
• Change their Facebook privacy settings together
• Tell them: if anyone asks for money online, tell me first

Data Breaches
A data breach happens when a company is hacked and user data is stolen — emails, passwords, phone numbers.
You may have been affected without knowing it. Criminals use stolen data to access other accounts, especially where the same password is reused.
Free, safe, and run by a respected cybersecurity researcher.
• Change it everywhere you used the same password
• Enable 2FA on all important accounts
• Use Google Password Manager — free, built into Chrome
Further Reading
Blog posts on staying safe online — updated regularly