Family Digital Hygiene and Child Safety Review for Melbourne Families: Close the Account-Takeover Gaps Across Three Generations Under One Roof
Your mum calls on a Sunday afternoon: she cannot get into her email, and the password she has used for fifteen years no longer works. You check and her account is forwarding every message to an address you do not recognise. Meanwhile your fourteen-year-old has the same password on her gaming account as on the family streaming service, and your partner’s old Hotmail — still logged in on the iPad in the lounge — has no two-factor authentication on it at all. One compromised account in a household is rarely just one account. Family Digital Hygiene and Child Safety Review from Cyber by Exegesis is the engagement designed to walk a Melbourne household through every device, every account, and every person under the roof — once, properly — so account takeover stops being a question of when.
The problem
Account takeover is the quiet workhorse of modern fraud. ACSC guidance for individuals and families is consistent on the mechanics: weak or reused passwords, missing two-factor authentication, and old logged-in sessions on shared devices are how attackers walk in. ACCC Scamwatch then sees the downstream — the phishing message sent from a real friend’s account, the “Mum, I’ve lost my phone” text from a hijacked number, the small unauthorised retail purchases that test whether anyone is watching.
Families carry a wider attack surface than most people realise. The grandparent who clicks every link. The teenager whose Discord and Instagram are connected to half a dozen third-party apps. The shared iPad that nobody has audited since 2021. The eSafety Commissioner provides reporting routes for cyberbullying, image-based abuse, and harmful content, but most parents do not know which form to use, what evidence to gather, or when to escalate. The control gaps are not technically complex — they are simply unattended, because no one person owns them.
What the Family Digital Hygiene and Child Safety Review does
Cyber by Exegesis runs a fixed-scope household engagement targeting account-takeover risk and child-safety setup together:
- A per-person account inventory across email, social, banking, retail, and gaming — identifying reused passwords, accounts without two-factor authentication, and forgotten logged-in sessions on shared devices.
- Two-factor authentication enrolment on the high-value accounts (primary email, banking, government services, primary social), with recovery codes printed and stored somewhere your family will actually find them.
- Device-level child-safety setup — screen time controls, content filtering, and app-purchase approvals across iOS, Android, and the family console.
- A social-media sharing review with the teenagers in the house — privacy settings, third-party app permissions, and a short conversation about what an attacker actually does with an oversharing public profile.
- An aging-parent scam-awareness setup — the three scam patterns ACCC Scamwatch sees most often, a one-page printed reference, and a “call me before you click” rule documented for the family.
- A walkthrough of the eSafety Commissioner reporting routes, so if something happens to a child in the house, you already know which form, what evidence, and how fast.
Cyber by Exegesis is the cyber consultancy line of Exegesis — the same company behind the DRMO live product. Our scope here is preventive household hygiene. We are not your IT support and we are not your incident responder; we set the controls across the household and then step back.
How it works
- We confirm the engagement scope on a short call, count the people and devices in scope, and send a short pre-engagement questionnaire so we are not asking your fourteen-year-old to list her accounts in front of her parents.
- We run a 90-minute on-site or video session with the adults — account inventory, two-factor authentication enrolment, and the aging-parent setup if relevant.
- We run a separate 45-minute session with each teenager in the house, privately, on their own devices, with parental consent and a clear scope.
- We configure device-level child-safety settings on the shared and child-assigned devices, and document what we changed.
- We leave you with a one-page household digital-hygiene reference, the printed scam-awareness sheet, the eSafety reporting cheat-sheet, and a 90-day check-in window.
Why this matters in Melbourne
Melbourne households are large, multi-generational, and device-dense — the inner-north terrace with two working parents, two teenagers, and a grandparent dropping in for childcare is exactly the household that account-takeover attacks compound across. One compromised email account becomes a phishing vector to the parents’ colleagues, a reset path to the teenagers’ socials, and a confidence-building step toward defrauding the grandparent. A Melbourne family that does the inventory once, enrols two-factor authentication on the accounts that matter, and walks the household through eSafety and Scamwatch reporting routes shuts most of that compounding down.
Sources
- ACSC guidance for individuals and families: https://www.cyber.gov.au/protect-yourself
- ACCC Scamwatch (National Anti-Scam Centre): https://www.scamwatch.gov.au/
- eSafety Commissioner: https://www.esafety.gov.au/
- OAIC Notifiable Data Breaches scheme (in the event a household account compromise involves a service that triggers an eligible data breach): https://www.oaic.gov.au/privacy/notifiable-data-breaches
- Cyber by Exegesis — Family Digital Hygiene and Child Safety Review (waitlist)
Join the waitlist
We are sequencing engagements by household composition (households with teenagers first, households with aging parents second). Join the waitlist with the number of people and devices in your household — we will tell you when we are ready to take a brief from your family.