--- title: Five Best Practices to Protect Your Retirement Nest Egg from Cybertheft description: Being proactive by checking your bank accounts and credit cards is key to keeping your money safe. However, are we totally safe and bulletproof? No. image: https://blog.acgworldwide.com/hubfs/AdobeStock_282359031%20(4).jpeg --- [![acg-logo-header.png](https://blog.acgworldwide.com/hs-fs/hubfs/acg-logo-header.png?width=123&name=acg-logo-header.png "acg-logo-header.png")](http://www.acgworldwide.com/) - [Who We Are](http://www.acgworldwide.com/about-acg/) - [Selected Staff Bios](http://www.acgworldwide.com/selected-staff-bios/) - [Culture and Philosophy](http://www.acgworldwide.com/culture-and-philosophy/) - [Advisory Board Members](http://www.acgworldwide.com/advisory-board-members/) - [What We Do](http://www.acgworldwide.com/our-services/) - [Wealth Management](http://www.acgworldwide.com/wealth-management/) - [Investment Advisory](http://www.acgworldwide.com/investment-advisory-services/) - [Third Party Administration](http://www.acgworldwide.com/third-party-administration/) - [Retirement Plan Consulting](http://www.acgworldwide.com/401k/) - [Financial Planning Services](http://www.acgworldwide.com/financial-planning-services/) - [Tax Strategies](http://www.acgworldwide.com/tax-strategies/) - [Who We Help](http://www.acgworldwide.com/our-clients/) - [Businesses](http://www.acgworldwide.com/businesses/) - [Entrepreneurs](http://www.acgworldwide.com/entrepreneurs/) - [Individuals and Families](http://www.acgworldwide.com/successful-individuals-and-families/) - [Foundations and Endowments](http://www.acgworldwide.com/foundations-and-endowments/) - [Press & Resources](http://www.acgworldwide.com/acg-live/) - [Blog](http://www.acgworldwide.com/blog/) - [Company News](http://www.acgworldwide.com/company-news/) - [CBS 6 News Market Briefs](http://www.acgworldwide.com/company-news/bill-fitzgerald-of-cbs-6-news-interviews-with-sandy-wiggins/) - [Monthly Investor Insights](https://blog.acgworldwide.com/topic/monthly-insights) - [Quarterly Commentary](http://www.acgworldwide.com/commentary/) - [Cost of Living Adjustments](http://www.acgworldwide.com/colas-and-limits/) - [Important Disclosures](http://www.acgworldwide.com/acg-live/website-disclosure/) - [Contact Us](http://www.acgworldwide.com/contact-us/) [![Richmond Virginia](https://blog.acgworldwide.com/hs-fs/hubfs/ACG_June2016/images/ACGLogo_KOHi.png?width=280&height=112&name=ACGLogo_KOHi.png "Richmond Virginia")](http://www.acgworldwide.com/) [![Nest Egg](https://blog.acgworldwide.com/hs-fs/hubfs/Nest%20Egg.jpg?width=1936&name=Nest%20Egg.jpg "Nest Egg")](http://www.acgworldwide.com) # ACG Blog # Five Best Practices to Protect Your Retirement Nest Egg from Cybertheft By [Joné E. Liuzza, ERPA, QPA, QKA](http://www.acgworldwide.com/selected-staff-bios/jone-liuzza/) - [Tweet](https://twitter.com/share) ![Joné E. Liuzza, ERPA, QPA, QKA](https://blog.acgworldwide.com/hubfs/Jone_Photo19.jpg) Joné E. Liuzza, ERPA, QPA, QKA Director of TPA Services I remember when I was 10, there was no such thing as a debit card. In fact, growing up in the ‘80s meant no internet, no PayPal, no direct deposit or any type of remote banking. While they make things extremely efficient and easy for us, these technologies have paved the way for computer-savvy masterminds across the globe to engage in criminal and malicious acts of stealing your hard-earned cash. I check my bank accounts and credit cards daily to check for unauthorized purchases. If something is off, my bank or credit card company is quick to remedy the situation. Being proactive by checking your bank accounts and credit cards is key to keeping your accounts and money safe.  However, are we totally safe and bulletproof? No. Cybercriminals are now bypassing smaller checking account balances in favor of our more lucrative retirement plan balances. It is equally easy to steal $1,000,000 as it is $100.  There are several documented cases where plan participants have had their retirement plan balances stolen.  A former Estee Lauder employee recently filed a [lawsuit](https://www.plansponsor.com/new-lawsuit-highlights-importance-cybersecurity-retirement-plans/) because she had nearly $100,000 stolen from her 401(k) plan in unauthorized distributions. The plaintiff claims the defendants – the employer, the recordkeeper, and the custodian – breached their fiduciary duties by not having processes in place to identify and stop the unauthorized charges, but no one is taking responsibility. The plaintiff is seeking restitution for her 401(k) account balance including investment earnings from the time her money was distributed to the time of judgment.  ## So what are the best practices to safeguard your retirement nest egg? 1. **Use strong passwords.** Experts recommend staying away from simple passwords such as your children’s names, home address, or anything easily found on social media. We recommend using a combination of letters, numbers and symbols – but certainly not the commonly used phrase “Password1.” 2. **Check your retirement plan balance regularly.** A good practice is to check your retirement plan (and other accounts) regularly. By using a finance aggregator, you can see all of your finances (banking, credit cards, retirement plans, etc.) simultaneously. 3. **Stay away from unprotected Wi-Fi.** You are putting your personal information at risk when you use free and unprotected Wi-Fi. Hotels, airports, and coffee shops are prime venues where hackers tend to linger. A seasoned thief could gain access to your passwords, bank accounts, and email account in just a few minutes. 4. **Be aware of phishing emails**. Life is busy. We are constantly multitasking and trying to check things off our to-do list. While it is easy to read a quick email without noticing any red flags, it is very important to recognize the warning signs.  Check the sender domain. You may receive what looks like a legitimate email from your bank, but the domain will have a completely different identity such as [fakename@fake.co](mailto:fakename@fake.co). ![BoA](https://blog.acgworldwide.com/hs-fs/hubfs/BoA.jpg?width=474&name=BoA.jpg)There are several warnings that the above image is a phishing email.  If you receive a phishing email, delete it without clicking on any of the links. Always be cautious of what you click.  In the above image, there is an action, “*Please sign in to your account*….”   However, when you place your cursor over the link, you will see that it is not Bank of America, but rather a fake link. If ever in doubt, call the sender institution to inquire about the email. IRS, banks, credit card companies, investment companies and other financial institutions will never send you an email to confirm account information that they should already have. 5. **Request two-step authentication.** By opting for a two-step process to gain access to your account, it may deter cybercriminals.  Any additional layers of security you can have are helpful in safeguarding your retirement account balance. Plan Sponsors are playing an active role educating participants when it comes to cybersecurity. There are training programs available through cyber insurance carriers.  Experts predict this epidemic will gain momentum with advanced technology and mastermind cybercriminals. There is no clear guidance on who should be responsible for cybertheft, but the retirement industry will keep a close eye on the Estee Lauder lawsuit. Once there is clear fiduciary guidance on this issue, plan sponsors may take a more proactive approach in administering retirement plan assets. Check with your retirement plan partners to learn how they are protecting your plan assets from cyber security threats and what signs to look out for. [![Talk to a Retirement Plan Expert Today](https://no-cache.hubspot.com/cta/default/2254275/2433b4bc-f1cf-4b00-bb31-7bb39b3273f3.png)](https://cta-redirect.hubspot.com/cta/redirect/2254275/2433b4bc-f1cf-4b00-bb31-7bb39b3273f3) — Posted on December 26, 2019 by [Joné E. Liuzza, ERPA, QPA, QKA](https://blog.acgworldwide.com/author/joné-e-liuzza-erpa-qpa-qka) [Joné E. Liuzza, ERPA, QPA, QKA](https://blog.acgworldwide.com/author/joné-e-liuzza-erpa-qpa-qka) — Topics: [401(k)](https://blog.acgworldwide.com/topic/401k), [Retirement](https://blog.acgworldwide.com/topic/retirement), [Wealth Management](https://blog.acgworldwide.com/topic/wealth-management), [Financial Planning](https://blog.acgworldwide.com/topic/financial-planning) ### Subscribe to Email Updates ### Posts by Topic - [401(k) (105)](https://blog.acgworldwide.com/topic/401k) - [Retirement (105)](https://blog.acgworldwide.com/topic/retirement) - [Monthly Insights (80)](https://blog.acgworldwide.com/topic/monthly-insights) - [Financial Planning (62)](https://blog.acgworldwide.com/topic/financial-planning) - [Investments (50)](https://blog.acgworldwide.com/topic/investments) - [Wealth Management (37)](https://blog.acgworldwide.com/topic/wealth-management) - [Market Performance (28)](https://blog.acgworldwide.com/topic/market-performance) - [defined contribution (21)](https://blog.acgworldwide.com/topic/defined-contribution) - [Tax Strategy (16)](https://blog.acgworldwide.com/topic/tax-strategy) - [defined benefit (16)](https://blog.acgworldwide.com/topic/defined-benefit) - [retirement plan (10)](https://blog.acgworldwide.com/topic/retirement-plan) - [Compilation (9)](https://blog.acgworldwide.com/topic/compilation) - [covid-19 (6)](https://blog.acgworldwide.com/topic/covid-19) - [qualified plan (6)](https://blog.acgworldwide.com/topic/qualified-plan) - [Asset Allocation (5)](https://blog.acgworldwide.com/topic/asset-allocation) - [distribution planning (5)](https://blog.acgworldwide.com/topic/distribution-planning) - [irs (5)](https://blog.acgworldwide.com/topic/irs) - [Third Party Administration (4)](https://blog.acgworldwide.com/topic/third-party-administration) - [participant loan (4)](https://blog.acgworldwide.com/topic/participant-loan) - [pbgc (4)](https://blog.acgworldwide.com/topic/pbgc) - [secure act (4)](https://blog.acgworldwide.com/topic/secure-act) - [TPA (3)](https://blog.acgworldwide.com/topic/tpa) - [defined benefit funding (3)](https://blog.acgworldwide.com/topic/defined-benefit-funding) - [fiduciary obligation (3)](https://blog.acgworldwide.com/topic/fiduciary-obligation) - [options (3)](https://blog.acgworldwide.com/topic/options) - [social security (3)](https://blog.acgworldwide.com/topic/social-security) - [IRA (2)](https://blog.acgworldwide.com/topic/ira) - [Roth (2)](https://blog.acgworldwide.com/topic/roth) - [SEP (2)](https://blog.acgworldwide.com/topic/sep) - [SIMPLE (2)](https://blog.acgworldwide.com/topic/simple) - [combo plan (2)](https://blog.acgworldwide.com/topic/combo-plan) - [coronavirus (2)](https://blog.acgworldwide.com/topic/coronavirus) - [cross-tested (2)](https://blog.acgworldwide.com/topic/cross-tested) - [70 1/2 (1)](https://blog.acgworldwide.com/topic/70-1-2) - [ADP test (1)](https://blog.acgworldwide.com/topic/adp-test) - [Case Study (1)](https://blog.acgworldwide.com/topic/case-study) - [Donor Advised Fund (1)](https://blog.acgworldwide.com/topic/donor-advised-fund) - [RMD (1)](https://blog.acgworldwide.com/topic/rmd) - [SECURE 2.0 (1)](https://blog.acgworldwide.com/topic/secure-2-0) - [alternative defined contribution plan (1)](https://blog.acgworldwide.com/topic/alternative-defined-contribution-plan) - [beneficiary (1)](https://blog.acgworldwide.com/topic/beneficiary) - [cash balance (1)](https://blog.acgworldwide.com/topic/cash-balance) - [catch-up contribution (1)](https://blog.acgworldwide.com/topic/catch-up-contribution) - [collars (1)](https://blog.acgworldwide.com/topic/collars) - [contribution (1)](https://blog.acgworldwide.com/topic/contribution) - [death (1)](https://blog.acgworldwide.com/topic/death) - [deductions (1)](https://blog.acgworldwide.com/topic/deductions) - [epcrs (1)](https://blog.acgworldwide.com/topic/epcrs) - [form 5500 (1)](https://blog.acgworldwide.com/topic/form-5500) - [funding deadline (1)](https://blog.acgworldwide.com/topic/funding-deadline) - [hardship (1)](https://blog.acgworldwide.com/topic/hardship) - [integrated (1)](https://blog.acgworldwide.com/topic/integrated) - [interval funds (1)](https://blog.acgworldwide.com/topic/interval-funds) - [late deposits (1)](https://blog.acgworldwide.com/topic/late-deposits) - [mega backdoor roth ira (1)](https://blog.acgworldwide.com/topic/mega-backdoor-roth-ira) - [mistake of fact (1)](https://blog.acgworldwide.com/topic/mistake-of-fact) - [nonspouse (1)](https://blog.acgworldwide.com/topic/nonspouse) - [pension (1)](https://blog.acgworldwide.com/topic/pension) - [plan termination (1)](https://blog.acgworldwide.com/topic/plan-termination) - [put writing (1)](https://blog.acgworldwide.com/topic/put-writing) - [required minimum distribution (1)](https://blog.acgworldwide.com/topic/required-minimum-distribution) - [roth ira (1)](https://blog.acgworldwide.com/topic/roth-ira) - [successor plan (1)](https://blog.acgworldwide.com/topic/successor-plan) - [vcp (1)](https://blog.acgworldwide.com/topic/vcp) see all [![Download our eBook to get the most out of your 401(k).](https://no-cache.hubspot.com/cta/default/2254275/038b0840-8b64-400d-8240-93c5f6bdc453.png)](https://cta-redirect.hubspot.com/cta/redirect/2254275/038b0840-8b64-400d-8240-93c5f6bdc453) [![Share on Facebook](https://static.hubspot.com/final/img/common/icons/social/facebook-24x24.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fblog.acgworldwide.com%2Ffive-best-practices-to-protect-your-retirement-nest-egg-from-cybertheft%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://static.hubspot.com/final/img/common/icons/social/linkedin-24x24.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblog.acgworldwide.com%2Ffive-best-practices-to-protect-your-retirement-nest-egg-from-cybertheft%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://static.hubspot.com/final/img/common/icons/social/twitter-24x24.png)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fblog.acgworldwide.com%2Ffive-best-practices-to-protect-your-retirement-nest-egg-from-cybertheft%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fblog.acgworldwide.com%2Ffive-best-practices-to-protect-your-retirement-nest-egg-from-cybertheft%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=Five%20Best%20Practices%20to%20Protect%20Your%20Retirement%20Nest%20Egg%20from%20Cybertheft) #### Phone: 800-231-6409 or 804-323-1886 | Fax: 804-323-1889 ©2026 ACG Worldwide. All Rights Reserved. ACG Wealth Management is a registered investment advisor with the Securities & Exchange Commission. If you would like to receive a copy of Form ADV, Part II please feel free to contact us at (804) 323-1886 or webmaster@acgwealthmanagement.com. [Important Disclosures](http://www.acgworldwide.com/acg-live/website-disclosure/)