Family Digital Hygiene and Child Safety Review for Sydney Families: One Household, Three Generations, One Phishing Door to Close
Your mum forwards you a text from “Australia Post” asking her to pay a $3.95 redelivery fee, and she wants to know if it’s real. Your fourteen-year-old just accepted a follower request from someone who messaged her about a “modelling opportunity”. Your partner re-used the same password across the streaming accounts, the school portal, and your shared cloud drive. None of these are catastrophes on their own. Together they are the surface area a single phishing message needs to convert into a drained account, a compromised identity, or a child-safety incident. The Family Digital Hygiene and Child Safety Review from Cyber by Exegesis is the household-wide sit-down designed to close all three doors in one engagement.
The problem
ACCC Scamwatch consistently reports phishing as the most-reported scam category in Australia. The attackers do not care which family member they reach first — they cast wide and convert whoever clicks. In a Sydney household with three generations of users on shared Wi-Fi, the weak link is usually not the person you would expect. Older parents are targeted with parcel-delivery, myGov, and bank-impersonation messages. Teenagers are targeted on Instagram, Snapchat, and Discord with grooming, sextortion, and “free Robux” lures. The middle-generation parents running the household typically have decent instincts but have never sat down to actually configure the device-level controls that would catch the messages before anyone has to make a judgement call.
The ACSC guidance for individuals and families is clear that the controls that matter — multi-factor authentication, passphrase managers, automatic updates, app-store-only installs, social-media privacy settings — are the same regardless of age. What changes is how you set them up for a 70-year-old versus a 14-year-old, and whether anyone in the household knows where to report a scam or a harmful contact when it happens.
What the Family Digital Hygiene and Child Safety Review does
Cyber by Exegesis runs a fixed-scope, household-wide engagement:
- A device-by-device walkthrough across the family’s phones, tablets, laptops, and smart TVs — confirming automatic updates, app-store-only installs, screen-lock, and find-my-device are all on.
- Account hardening on the high-value logins: email, myGov, banking, school portals, Apple/Google IDs. MFA on, passphrase manager set up, recovery details checked.
- Child-safety configuration on each child’s device: screen time controls, content filters, app-purchase approvals, and the privacy settings on the social platforms they actually use.
- A 30-minute sit-down with any older relatives in the household to walk through real Australian scam examples (parcel-delivery SMS, bank-impersonation calls, myGov phishing emails) and what to do when a message looks off.
- A printed one-page reporting card for the fridge: where to report scams (Scamwatch), where to report cyberbullying, image-based abuse, or harmful content involving a child (eSafety Commissioner), and where to report identity compromise.
- A short written summary of what was changed, what remains in the household’s hands, and a 60-day check-in.
Cyber by Exegesis is the cyber consultancy line of Exegesis — the same company behind the DRMO live product. This engagement is preventive. We are not your IT support and we are not an incident responder; we set the controls, teach the household, and step back.
How it works
- We confirm scope on a short call — how many adults, how many children, ages, devices in use, and any specific concerns (a parent who already lost money to a scam, a child who has had an incident on a platform).
- We come to your home for a two-to-three-hour session, or run it over video if you prefer, working device-by-device and account-by-account.
- We configure child-safety controls on the children’s devices alongside the children where appropriate — controls imposed without explanation do not survive contact with a teenager.
- We run the 30-minute scam-awareness conversation with any older relatives, using real Australian examples and the eSafety and Scamwatch reporting routes.
- We leave the household with the written summary, the fridge card, and a 60-day check-in to confirm the controls have held.
Why this matters in Sydney
Sydney households are dense, multi-generational, and digitally connected — grandparents on iPads, parents on laptops, kids on phones, all on the same home network and often sharing the same Apple or Google family account. That density is exactly what makes a single phishing message expensive: one compromised credential can cascade through shared payment methods, shared photo libraries, and shared calendars. A Sydney family that hardens its accounts, configures its children’s devices, and gives its older relatives a clear reporting route closes the door phishing depends on — before the message arrives, not after.
Sources
- ACSC guidance for individuals and families: https://www.cyber.gov.au/protect-yourself
- ACCC Scamwatch (National Anti-Scam Centre): https://www.scamwatch.gov.au/
- eSafety Commissioner (reporting cyberbullying, image-based abuse, and harmful content): https://www.esafety.gov.au/
- OAIC Notifiable Data Breaches scheme (if a household account compromise involves a third-party service breach): https://www.oaic.gov.au/privacy/notifiable-data-breaches
- Cyber by Exegesis — Family Digital Hygiene and Child Safety Review (waitlist)
Join the waitlist
We are sequencing engagements by household composition and by suburb cluster. Join the waitlist with a quick note on who lives in the household and the ages of any children — we will tell you when we are ready to take a brief from your family.