Targeting you:
- Be vigilant. Check and challenge any request to change account details.
- Treat all requests from suppliers and creditors that request any changes to regular contact information, such as a telephone number, as suspicious.
- Contact suppliers and creditors independently to check the request is genuine. Use contact details you already hold or that have been obtained independently, not those included in the request.
- Don’t make any changes to contact or payment details until you’re certain it’s genuine, even if they’re claiming it’s urgent.
- Once you’ve made a payment, confirm with the intended beneficiary that it’s been received.
Impersonating you:
- In your out-of-office messages avoid sharing direct business phone numbers, names, titles and email addresses for other members of your organisation.
- Strengthen passwords for access to email accounts. Avoid common phrases and using the same password for everything. A good way to create a strong and memorable password is to use three random words and replacing some letters with numbers and symbols, for example, 42Greenwh@leOcean!
