Pressure, secrecy and money
The costliest scams do not use malware. They ask a person to send money.
The most expensive scams against small businesses often use no malware at all. They simply ask a person to send money, and they make it feel routine.
Common versions
- A supplier says their bank details have changed.
- The owner or a manager asks you to buy gift cards, quickly and quietly.
- An invoice arrives for something you never ordered.
- A message says a payment is urgent and confidential.
The pattern
Look for the mix of money, speed and secrecy. If a message asks you to skip the usual process, treat that as the warning.
How to stay safe
- Stop. Do not reply to the message.
- Check by phone, using a number you already have, not one from the message.
- Ask a second person to approve any new payment details or unusual payment.
- If money has already been sent, call your bank right away, and then tell us.
Good to know
Every business should have a simple rule. No change to payment details without a phone call to a known number and a second person to approve. A rule like that protects everyone on a bad day.