The South Australian Business Chamber Today

Payroll scams ... your HR, payroll or finance staff are most at risk.

Monday, October 24th 2022

By the South Australian Business Chamber corporate members at the Commonwealth Bank

Business email compromise scams target businesses of all sizes. They involve emails from a compromised email address, or emails made to look like they are from someone you know, such as your:

  • boss
  • supplier
  • customer
  • lawyer.

These scams involve emails sent to you or your business with a request to make payment to a new account. This new account may be under the scammer’s control, and your money could be lost. If you get an email with a request to pay a new account, or an invoice with different account details to those usually used — pause, review, reflect. Think about calling the sender of the email before paying.

One variation that is prevalent is payroll scams. In these kinds of scams, cyber criminals impersonate employees in an attempt to trick staff into redirecting funds to the scammer. Staff working in HR, payroll or finance are most at risk.

  • The emails they receive might look official or even appear to come from a legitimate employee email address.
  • They might ask for an urgent update of bank account details to a scammer account instead.
  • In other cases, the first email will seem harmless, simply asking what the process for updating payment details is. The idea is to later make contact with a more targeted follow-up.
  • Educating staff on how to spot these fraudulent emails will mean your business is not compromised and money is not lost. Here is how to keep your business safe, as recommended by the Australian Cyber Security Centre.

    1. If an email appears suspicious, do not reply or click on any links. Instead, look up the person’s email address and create a new email to verify the request being made. If your company’s database lists phone numbers, give them a call to quickly check the email’s validity
    2. Always set a strong, unique, two-factor authentication password with your email. If you receive a notification about a bank account update you didn’t authorise, contact payroll immediately
    3. Frequently check your bank accounts for any unusual activity.

    Keeping reading >

      Author
      Recent Articles
      23 Apr 2024
      Lachlan Hoy has a new vision for the future of South Australia
      23 Apr 2024
      50% off the payroll tax bill for regional businesses
      23 Apr 2024
      Business leaders encouraged to participate in this year's Vinnies CEO Sleepout
      23 Apr 2024
      Safe and Sound: Is your workplace managing noise risks?
      19 Apr 2024
      Rostering rules for Anzac Day this Thursday
      18 Apr 2024
      The number of businesses entering administration is on track for a 10 year high