Many people do their best to protect themselves from cybercrimes by prioritizing cybersecurity on their laptops, smartphones and other devices. But the real risk may be the theft of your personal data through other means.

A survey commissioned by the cybersecurity company NordVPN, released Friday, found that cybercriminals are shifting how they gain entry, and many of us are ignoring the signs. Although attackers used to mainly target devices — like by slipping malicious files into a computer — the focus is now on manipulating people through scam calls, phishing messages that imitate popular companies and fake login pages to steal passwords.

In a survey of 1,200 Americans, NordVPN found that 91% of people are concerned about cybersecurity scams. Some 56% worry more about broader threats, such as identity theft or fraud, than about scam calls, which they are more likely to encounter regularly. On a daily basis, 46% of people say they experience scam calls, and 17% say they personally deal with identity theft and fraud. 

“People picture cybercrime as stolen accounts or drained bank balances, but criminals succeed much earlier in the process,” NordVPN Chief Technology Officer Marijus Briedis said in a statement. “The real moment of attack is when someone feels rushed, scared or pressured into trusting too quickly. From that point, it takes just a few clicks to go from a phone call to a stolen identity.”

In other words, many people are unaware of the major risks that come with scam calls or phishing emails. “They’re the starting point for exactly the kinds of identity theft and financial fraud people are most afraid of,” Briedis said. 

Scam calls have increased significantly in the past year, but there are ways to counter them. One way is to use the iOS call screening feature on the iPhone and ignore calls from unknown numbers. 

NordVPN recommends several steps you can take to protect yourself from cybercrime. If you encounter a suspicious text message, email or call, pause before taking any type of action. According to NordVPN, scammers like to rush you and messages that seem urgent should be deemed suspicious. 

“Modern attacks depend on people reacting faster than they can think,” Briedis said. 

Other steps you can take include:

• Verify information before responding. 
• Ensure that links and addresses are legitimate before clicking them.
• Enable multifactor notifications whenever possible and use strong passwords.
• Only accept downloads from trusted sources. 
• Download security software that can handle multiple cyber threats simultaneously.

 A representative for NordVPN did not immediately respond to a request for comment.