Family Digital Hygiene and Child Safety Review for Australian Households: Close the Account-Takeover Gaps Across Three Generations

Your mum rings on a Sunday to say her email “isn’t working” — she has been locked out, and the password reset link is going to a phone number she doesn’t recognise. While you are still on the call, your teenager mentions that a friend’s Instagram “got hacked” last week and started messaging everyone for iTunes vouchers. Meanwhile the family iPad — the one signed into your Apple ID, your Netflix, and your Amazon — has been used by three different people today. Account takeover isn’t one attack on one person; in a family it is a slow erosion across everybody’s logins at once. The Family Digital Hygiene and Child Safety Review from Cyber by Exegesis is the single engagement designed to close those gaps across the whole household.

The problem

Account takeover is the workhorse of consumer cybercrime in Australia. ACCC Scamwatch reports it consistently as a leading delivery mechanism — once an attacker controls one mailbox or social account, they pivot into banking, retail, MyGov-adjacent services, and the contacts list. ACSC guidance for individuals and families is direct about the controls that prevent it: unique passwords stored in a password manager, multi-factor authentication on every important account, and recovery details (phone number, backup email) that are actually current and actually yours.

The problem in a family is that those controls have to be set up per person and per device, and most households have never done a single sweep. Grandparents are using the same password across six services. Teenagers have public social profiles with location data leaking out of photo metadata. The shared iPad is logged into a parent’s email permanently. Nobody knows who to report to when something goes wrong — eSafety for image-based abuse and cyberbullying, Scamwatch for the scam itself, the platform for the account, the bank for the money. The information exists; the household-wide review does not.

What the Family Digital Hygiene and Child Safety Review does

Cyber by Exegesis runs a fixed-scope engagement covering the whole household:

• An account inventory across parents, children, and any aging relatives in scope — email, social, banking, retail, cloud storage, streaming — with MFA status and password-reuse flagged per account.
• A password manager set up for the household, with per-person vaults and shared vaults for genuinely shared services.
• Device-level child safety settings configured on iOS, Android, Windows, macOS, and the consoles in the house — screen time, content filters, purchase approvals, location sharing.
• A social-media sharing review for each child’s accounts, including what is public, what metadata is leaking, and what the platform’s own reporting routes look like.
• An aging-parent scam-awareness setup: a printed one-pager of “if you get a call/email/SMS like X, do Y”, plus a trusted-contact phone number the parent calls first before acting on any urgent request.
• A short written report identifying the eSafety, Scamwatch, OAIC, and platform reporting routes relevant to your household, kept somewhere everyone can find it.

Cyber by Exegesis is the cyber consultancy line of Exegesis — the same company behind DRMO. Our scope here is preventive, household-wide hygiene. We are not your IT support and we are not an incident responder; we set the controls and document the reporting routes so you can act fast if something goes wrong later.

How it works

1. We confirm scope on a short call — who is in the household, who is in scope (including any aging parents not living with you), and what devices and accounts matter.
2. We send a short pre-work checklist so each person inventories their own accounts before we start.
3. We run a 90-minute working session with the parents/guardians to set up the password manager, turn on MFA on the priority accounts, and configure recovery details correctly.
4. We run a 30-minute session per child (age-appropriate) covering social-media privacy, oversharing, and eSafety reporting routes for cyberbullying or image-based abuse.
5. We do a 30-minute aging-parent session — in person or by video — covering the scam patterns Scamwatch reports most often, and the trusted-contact rule.
6. We leave you with the written report, the printed scam one-pager, and a 60-day check-in.

Why this matters in Australia

Account takeover is a cross-generational risk and Australia’s regulator and reporting landscape is fragmented by design — eSafety handles online safety harms, Scamwatch handles scams, OAIC handles data breaches under the Notifiable Data Breaches scheme, and each platform handles its own account recovery. A household that has never mapped those routes loses critical hours after an incident working out who to call. The Family Digital Hygiene and Child Safety Review compresses that into one engagement so every member of the household — from the eight-year-old on a shared iPad to the 78-year-old on a Gmail account they have used since 2009 — is harder to take over and faster to recover.

Sources

• ACSC guidance for individuals and families: https://www.cyber.gov.au/protect-yourself
• ACCC Scamwatch (National Anti-Scam Centre): https://www.scamwatch.gov.au/
• eSafety Commissioner: https://www.esafety.gov.au/
• OAIC Notifiable Data Breaches scheme: https://www.oaic.gov.au/privacy/notifiable-data-breaches
• Cyber by Exegesis — Family Digital Hygiene and Child Safety Review (waitlist)

Join the waitlist

Join the waitlist — first access when Cyber by Exegesis opens the Family Digital Hygiene and Child Safety Review

We are sequencing engagements by household composition — families with school-aged children first, multi-generational households (with aging parents in scope) second. Join the waitlist with a short description of your household and we will tell you when we are ready to take a brief.