Phishing, fake invoices and tech support scams: protecting a small business

Scammers do not need to be clever when people are busy. A convincing email, a call claiming to be from "technical support" or a changed bank account on an invoice is often enough. These scams happen in every country, and the defences are the same everywhere.

The most common scams

• Phishing emails that copy a real login page to steal your password.
• Fake invoices and changed bank details, often sent from a hacked supplier email account.
• Tech support scams, where someone phones or shows a pop-up saying your computer is infected and asks for remote access or payment.
• Urgent requests from "the boss" asking staff to buy gift cards or make a transfer.

Warning signs

• Urgency or secrecy: "do this now and do not tell anyone".
• A request to change payment details or pay in an unusual way.
• Links to a login page you did not ask for.
• Unexpected calls about problems with your computer.

Settings that stop most attacks

1. 1Turn on multi-factor authentication for every email account.
2. 2Use a password manager and unique passwords.
3. 3Verify bank detail changes by phone, using a number you already have.
4. 4Keep computers and phones updated.
5. 5Give staff a simple rule: if in doubt, ask before clicking or paying.

A local technician can set up these protections and train your team. Find cybersecurity help, or read tech help for older family members for scam tips at home.