'A cyber incident can be costly, but basic protections cost nothing': TikTok’s Head of Global Security on how SMBs can boost their cybersecurity for free - TechRadar

Social media has become essential for small businesses, serving as their primary shopfront, sales channel, and customer service desk. TikTok alone helped UK small and medium-sized businesses generate an estimated £3.4bn in additional output in 2025. However, this digital-first approach exposes businesses to evolving cyber threats, with nearly half of UK small businesses reporting cyber breach attempts.

Treat unexpected offers as unverified

The most effective scams appear as legitimate opportunities—unexpected investors, collaborations requiring upfront fees, or services promising rapid growth. Businesses should verify all unexpected offers through official channels rather than links in messages. Ignore anyone selling likes, followers, or verification, as these could compromise account security.

Lock down your logins

Use unique passwords of at least 12 characters for every business account to prevent one breach from compromising multiple systems. Enable 2-Step Verification as an additional security layer. Where supported, implement passkeys tied to biometric data, which are more secure than traditional passwords. Never share passwords via email or direct messages.

Know who has access

Avoid sharing login credentials among team members. Instead, provide individual access and use password managers to organize credentials. Keep recovery information updated and regularly check security alerts and active devices. Critically, remove access immediately when employees, freelancers, or agencies leave the organization.

Watch what's in shot

Behind-the-scenes content can inadvertently expose sensitive information. Before posting, review backgrounds for delivery labels, order slips, or customer details that could be exploited by scammers targeting the business or its customers.

Report anything suspicious

Reporting suspicious emails or social media activity helps platforms identify patterns and protect other businesses. "A cyber incident can be costly, but basic protections cost nothing," according to Kim Albarella, Head of Global Security at TikTok. These simple habits can help maintain revenue while keeping cybercriminals at bay.