You sit down at your desk and open your email. There’s a message from a supplier you deal with regularly: “Please note our bank account has changed. Attached is the latest invoice. Due today.” You double-check the logo, the supplier’s name, even the email signature. It looks real. What would you do next?
Wrong moves include clicking the link or paying the amount immediately. The right move: contact the supplier using their known phone number or email, don’t reply to the invoice. Verify domain names for subtle typo-changes. Have someone else on your team review any bank detail updates. This matters because payment redirection scams are on the rise, they often involve spoofed or compromised supplier emails directing your funds to fraudsters. One mistaken wire could mean thousands lost.
Think your team is ready? You can run a phishing simulation as a training exercise to test everyone’s response.