Current methods.
WHAT HAS IMPROVED FOR ATTACKERS
Phishing messages without the errors people were trained to spot Personalised messages at volume Convincing impersonation by voice Fake documents and identification Messages matching a real person's writing style
THE MOST DAMAGING PATTERN FOR BUSINESSES
A convincing message requesting a change to payment details.
THE CONTROL THAT DEFEATS IT
No payment details change without a phone call to an independently obtained number.
Never the number in the message.
WHAT TO TRAIN STAFF ON
The old advice about spelling and grammar is obsolete Urgency is the tool, not a signal of legitimacy Verify through a separate channel, always
FOR PERSONAL FRAUD
Calls from apparent family members in distress Romance approaches with convincing profiles Investment approaches with fabricated credentials
WHAT PROTECTS INDIVIDUALS
Call back on a known number Never send money to someone you have not met Agree a family verification question
