12 tips to safeguard the Internet of Things

by Adam Fingersh 3 min read May 18, 2016

Iot4-shutterstock_329519927
The benefits of the Internet of Things are only as strong as the weakest connected point.

Having fraud prevention strategies in place that businesses and consumers can use to manage risk and increase security when using Internet-enabled products, also known as the Internet of Things (IoT), is critical.

In addition to connected devices such as smartphones and tablets, a tremendous number of consumer products — including cars, heart monitors and household appliances — are now connected to the Internet. Many of these connected products have weak security and controls, creating points of weakness in users’ critical private networks, systems, and data.

The Internet of Things is only as strong as its weakest link, and it is important to fully understand what an interconnected environment means. Opening products and services to the Internet dramatically increases the opportunities for cyber criminals, who can hack those products to get into your broader systems.

As more and more products are connected, a casual mindset about the security risks inherent in IoT can create significant risk. Knowing that, we are sharing the following tips for both consumers and businesses.

Consumers
To help consumers protect themselves against the risks and vulnerabilities regarding the Internet of Things, Experian’s global Fraud and Identity business has developed the following tips:

  • Ensure that the products and services being purchased and connected are from reputable companies.
  • Ensure that the providers of these products and services have clear privacy and data-usage policies.
  • Be aware that data from any smart device may make its way to third parties for a variety of purposes and that there are not always standard policies across providers.
  • Make sure that any access to these systems is always closely guarded.
  • Be aware of the applications installed on devices and download applications only from reputable providers, such as the iTunes App Store or Google Play, rather than gray-market app platforms. Also, only download apps created by trusted entities.

In addition to consumers enjoying the benefits of online access to multiple devices, businesses also need to be accountable. Thoughtfully applying appropriate levels of holistic thinking will go a long way toward ensuring that your business’s contribution isn’t the weakest link and that the Internet of Things continues its rapid and exciting growth.

Businesses
Experian encourages businesses to work with the mindset that any product poses a significant potential for threat. The tips below were created for businesses to use as a guideline:

  • Access to systems should require more than just credentials. Leverage cyber intelligence and complex device-recognition solutions to prevent unauthorized access.
  • Designate who has access to systems and clarify why they need it. It is also important to understand the normal behavior of who is logging into these systems, so that when anomalies occur, immediate preventative action can be taken.
  • Clearly outline roles and responsibilities in terms of access monitoring. This can be segmented by factors such as channel or line of business.
  • Share intelligence across the consumer and enterprise side of your business.
  • Partner with providers that have been successfully solving the account takeover problem. The concerns and vulnerabilities of Account Takeover problems in the digital realm using fit-for-purpose technologies are similar to the concerns and vulnerabilities in the Internet of Things world.
  • Apply robust privacy policies and practices. Doing so will ensure that the data being collected is actually required for the services offered and that data-collection practices are easily understood by the consumer.
  • Treat any collected data as highly sensitive information. It is important to note that even seemingly uninteresting data can be used by fraudsters to build robust and accurate stolen identities, which can be used for online impersonation, social engineering, phishing attacks and more.

Learn more about Experian’s Fraud and Identity business.

Related Posts

The Email Address as Your Most Powerful Identity Signal

The why behind Experian's acquisition of AtData What happens when a comprehensive email intelligence database joins a global leader in data, analytics and fraud prevention? The acquisition of AtData adds 25+ years of building a complete view of email as an identity signal. Financial institutions can recognize, engage and protect customers unlocking a new standard for the way their teams work and the customer experience. That's what Experian's acquisition of AtData delivers. How we got here Not all email addresses tell the same story. Some are newly created. Some exhibit bot-like patterns. Some are inconsistent with every other signal you have about that person. Imagine a real customer. You have a job. You shop online. You have a primary email from your employer, a personal Gmail you've used for 15 years, and an old Yahoo address you still use for shopping because you've been using it since college. You're an engaged customer who interacts with brands, makes purchases and pays bills on time. But each system sees a different version of you. When you apply for credit, the lender sees one email. When you shop, the retailer sees another. When you sign up for a service, you might use the third. For financial institutions: You slow down the approval process to manually verify identity or approve applicants without the full picture. For retailers: You can't tell which version of "customer" is the most engaged, so you either over-mail or under-serve. For fraud systems: Sees a new account created under one email and flags it as suspicious because it doesn't have the history. This was the original problem AtData was built to solve in 1999. Twenty-five years later, that problem didn’t go away, it became more complex. Email fragmentation and device sharing are more common, and identity theft is more sophisticated. Capabilities that now work together Experian has built sophisticated identity and fraud solutions backed by consumer data resources and decades of expertise in credit and risk. AtData brought the ability to assess whether an email address is trustworthy, reachable and consistent—at scale, in real time. Experian is now making email intelligence foundational, not optional. This matters for: Fraud prevention and risk management: Distinguishing a returning customer from a new threat. Knowing whether an email is newly created, exhibiting bot-like patterns or inconsistent with other identities is crucial. Compliance: Building audit trails that can explain identity decisions. Email data history and behavioral signals create the documentation needed to defend your decisions. Credit: Verifying identity in a world where traditional signals are shifting. Email signals provide a persistent, durable identifier that confirms who someone actually is. Marketing: Reaching the right person across email, mail and digital channels. Email intelligence reveals which addresses are actively engaged and reachable. Research shows email remains one of the highest-ROI marketing channels outperforming paid search and social advertising1. The problem every marketer faces: You end up burning budget on addresses that bounce, are unmonitored or are associated with users who never open mail. For credit marketing specifically, email enables faster, more targeted delivery of firm offers across channels, something that's increasingly important in a post-cookie world. "Email is a persistent identifier in a fragmented world. It's what connects a person's postal address, phones, devices, behaviors—the full picture of who they are. By embedding that into our infrastructure, we're not just adding another data point. We're fundamentally improving how businesses understand who their customers are."- Ashley Knight, Senior Vice President, Financial Services and Data Why now? AI is reshaping how decisions are made in every industry. Models are getting faster, more automated and more embedded in core workflows. But AI is only as effective as the data behind it. Fragmented data + fast models = faster, larger-scale misclassifications. In an era of synthetic identities, AI agents, deepfakes and AI-generated activity, the value of durable, persistent, real-world data signals has increased dramatically. Deloitte’s Center for Financial Services projects that generative AI could drive fraud losses in the U.S. up to $40 billion by 2027, a 32% growth rate since 2023. And email sits at the center of it with business email compromise already being one of the most common and costly fraud types. People change phones, move homes and swap devices, but they often hold onto their email for years. That's the signal that protects your business, and the one we've built into the core of how we help you make decisions with confidence. View the press release here

August 6, 2026 by Zohreen Ismail
Building Financial Opportunity Through Purpose-Driven Partnership

Discover how the National Urban League and Experian partner to expand financial literacy and create economic opportunity.

August 6, 2026 by Scarlet Nickel
2026 U.S. Identity and Fraud Report 

Explore key findings and insights from our newly released 2026 U.S. Identity and Fraud Report. Read more now!

August 5, 2026 by Laura Burrows

Subscribe to our Newsletter

Enter your name and email for the latest updates.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Subscribe to our Newsletter

Don't miss out on the latest industry trends and insights!
Subscribe