TikTok Head of Global Security on how SMBs can boost their cybersecurity for free

Nearly two-thirds of businesses utilize social media, making it crucial for SMBs to bolster their cybersecurity. TikTok, in particular, has helped UK small and medium-sized businesses generate £3.4 billion in additional output in 2025. However, scammers and cybercriminals are adapting their methods to exploit this digital landscape.

Nearly half of small businesses in the UK have reported being targeted by a cyber breach or attack. TikTok's security team removes over 99% of fraudulent or scam content before anyone reports it.

To enhance cybersecurity, TikTok offers five free steps for SMBs:

1. Treat unexpected offers as unverified. Be cautious of unsolicited investment propositions, collaboration requests with upfront fees, or promises of rapid follower growth. Verify such offers through the organization's official website or trusted contacts, and disregard attempts to sell likes, followers, or verification.

2. Secure login credentials. Create unique 12-character passwords for each business account, enabling 2-Step Verification for added security. Avoid sending passwords via email or direct messages.

3. Manage access carefully. Assign individual login access to each team member and employ a password manager to organize credentials. Update recovery emails, phone numbers, and promptly remove access for departing employees or freelancers.

4. Be mindful of what's in the background. When sharing behind-the-scenes content, ensure no sensitive information like delivery labels or customer details is visible, as this could aid potential scammers.

5. Report suspicious activity. If an email or social media post raises concerns, report it immediately. Reporting helps platforms identify patterns and act promptly to protect other businesses facing similar threats.