Mobile money scams, stolen WhatsApp accounts, shared passwords, backups never tested: the simple habits that protect a small company, before you consider a cybersecurity course.
People searching for “cybersecurity training Douala” or “cybersecurity training Cameroon” are not all technicians. They are often small-business owners who have already had something happen: a stolen WhatsApp number, a fake transfer, a locked computer. The good news is that most of these incidents can be avoided with simple habits the whole team can learn. Here they are, before we talk about training.
The scams that target small businesses first
Attacks on a Cameroonian small business rarely come from a hacker in front of a black screen. They come through the phone, and through trust.
The fake mobile money deposit. You receive a text that looks like your operator’s, announcing a deposit, then a call: “I sent it to the wrong number, please send the money back.” The text was fake. Before sending anything back, check your balance yourself, in the app or through the operator’s menu, never on the strength of a message.
The code request. Someone poses as an operator agent, a supplier or a friend and asks you to read out a code you received by text. That code is almost always used to take over an account: your WhatsApp, your mobile wallet, your email. A code received by text is given to nobody, and neither is your mobile money PIN.
The stolen WhatsApp account. Once your number is taken, the scammer writes to your customers and relatives in your name to ask for money. Protect yourself by turning on WhatsApp’s two-step verification (in Settings, then Account): it adds a PIN only you know.
The fake change of number. A “supplier” writes from a new number to say their payment details have changed. Before paying, call them on the old number, the one you already know.
These scams have one thing in common: they rush you. Urgency is the signal. A request for money or a code that cannot wait ten minutes for a check is almost always a scam.
Passwords
The company email password is often the same everywhere, known to everyone, written on a piece of paper next to the computer. If one of those accounts falls, they all fall.
Three rules are enough to change that. A different password for each important account, starting with email, since that is how every other one gets reset. Phrases rather than words: four or five unrelated words are stronger and easier to remember than one twisted word. And two-factor authentication wherever it exists, so that a stolen password is not enough.
A password manager helps you keep all this without remembering anything. And when an employee leaves, change the passwords they knew that same day.
Backups
A failing drive, a stolen computer, a virus that encrypts your files and demands a ransom: the day it happens, only a backup saves you.
Keep several copies of the files the business lives on: the accounts, the customer files, the invoices. At least one of those copies should be off the premises or online, to survive a theft or a fire. And a copy unplugged from the computer cannot be encrypted along with it.
Above all, test. Once a month, try restoring a file. Many companies discover on the day of the breakdown that their backup stopped working months ago.
The small settings that matter
Install updates for Windows, your phone and your software: they fix known flaws. Do not install “cracked” software, a classic way in. Give each employee their own account on the computer rather than a shared session. And change the Wi-Fi router’s factory password, the one printed underneath.
When training becomes useful
You can apply these habits today. What is harder is making them last, training the team, and knowing what to do in the first hours when an incident happens anyway.
That is what our cybersecurity essentials course is for: how attacks actually happen, passwords and two-factor authentication, email and WhatsApp scams, verified backups, protecting a network and workstations, and responding after an incident. It is for directors as well as technicians, with no prior level required, in Douala, Yaoundé or online, with a MINEFOP-approved certificate.
If you would rather have a technician check your computers, backups and network directly, our maintenance and support service handles it. And to secure the business use of WhatsApp, read our article on WhatsApp Business.
