The Moscow Rules are a set of guidelines developed during the Cold War for clandestine operations in hostile environments, particularly in Moscow, where the KGB’s surveillance capabilities were unparalleled. These rules served as a survival manual for CIA operatives operating behind the Iron Curtain, emphasizing adaptability, vigilance, and the ability to think on one’s feet.

How this may apply to the general public now, as most of us are not in Moscow, is that we are finding ourselves more and more surveilled not by the government (though, this may be changing) but by the companies that we interact with online. Every social media platform owned by a corporation, every web site that is forcing cookies and collecting personal information for targeted ads, and every system that is collecting data for sale to other corporations.

Your mileage may vary….

---

1. Assume Nothing

Principle: Question everything you encounter online.
Actionable Tips:

• Treat unsolicited messages and offers with suspicion, even if they appear genuine.
• Be cautious about links or attachments, even from trusted sources—verify before clicking.
• Avoid assuming online personas or profiles are authentic without cross-verification.

---

2. Trust But Verify

Principle: Double-check sources and information before acting.
Actionable Tips:

• Use tools like reverse image search to confirm the authenticity of images or profiles.
• Verify news stories with multiple credible outlets before sharing.
• Confirm the identity of anyone requesting sensitive information or money.

---

3. Don’t Look Back

Principle: Focus on staying proactive and forward-thinking.
Actionable Tips:

• Regularly update passwords and security measures.
• Review and clean up old social media posts or accounts to minimize your digital footprint.
• Avoid reusing old strategies or assumptions that might not apply to new online threats.

---

4. Assume You Are Under Surveillance

Principle: Operate as if your actions are visible to others.
Actionable Tips:

• Use end-to-end encrypted messaging apps for sensitive conversations (e.g., Signal or WhatsApp).
• Limit the personal information you share publicly on social media.
• Use a VPN to mask your online activity, especially on public Wi-Fi networks.

---

5. Be Aware of Your Surroundings

Principle: Monitor your digital environment for threats.
Actionable Tips:

• Stay alert for phishing attempts, scams, or unusual account activity.
• Regularly check your social media privacy settings to see who can view your posts and data.
• Be mindful of location sharing and geotagging features on apps.

---

6. Keep Your Options Open

Principle: Have a backup plan for contingencies.
Actionable Tips:

• Use two-factor authentication (2FA) for all critical accounts.
• Keep offline backups of essential data in case of ransomware or account lockouts.
• Maintain secondary, secure communication channels for emergencies.

---

7. Blend In

Principle: Avoid drawing unnecessary attention to yourself.
Actionable Tips:

• Keep social media profiles neutral and avoid posting polarizing or overly personal content.
• Use pseudonyms or alternate accounts for activities like commenting on forums.
• Avoid oversharing details about your location or plans in real time.

---

8. Don’t Get Caught

Principle: Stay vigilant to protect yourself from threats.
Actionable Tips:

• Use strong, unique passwords and a password manager to keep them organized.
• Be mindful of malware risks by avoiding suspicious downloads or apps.
• Regularly audit your digital presence for signs of compromise, such as unexpected login attempts.

---

9. Minimize Your Exposure

Principle: Reduce your attack surface online.
Actionable Tips:

• Disable cookies and tracking whenever possible using browser settings or privacy extensions.
• Limit the number of apps and platforms you use; only join those necessary and trustworthy.
• Avoid sharing sensitive information like your address, financial details, or personal identifiers online.

---

10. Be Prepared to Act Fast

Principle: React quickly to potential risks or breaches.
Actionable Tips:

• Familiarize yourself with account recovery processes for key platforms.
• Report suspicious behavior or accounts to platform administrators immediately.
• Have a crisis response plan, such as contacting your bank or credit agency if financial data is compromised.

---

By following these principles, you can maintain safe and secure communication practices while navigating the complex landscape of the modern internet and social media. Stay alert, stay informed, and always prioritize your digital well-being.