The most damaging attack.
WHAT HAPPENS
A message appears to come from a supplier, a client, or a colleague.
It asks you to update bank details, or to make a payment to a new account.
The money goes to the fraudster.
WHY IT WORKS
The message looks genuine It frequently follows a real conversation It arrives when a payment is expected
HOW THEY KNOW
Frequently through compromised email, theirs or yours.
They watch the conversation and intervene at the right moment.
THE CONTROL THAT DEFEATS IT
No change to payment details without a phone call to a number you already had.
Not the number in the message.
MAKE IT ABSOLUTE
No exceptions for urgency, seniority or familiarity.
WHAT TO TELL SUPPLIERS
That you will always call to verify, so they expect it.
WHAT TO TELL CUSTOMERS
That your bank details never change, and to call you if they receive a message saying otherwise.
WHAT THIS PREVENTS
The single most financially damaging fraud small businesses face.
