1. Phishing Emails

Phishing emails attempt to trick employees into clicking malicious links or revealing sensitive information.

Common signs

• Urgent messages asking you to act quickly
• Requests for passwords or login details
• Links to fake websites that look legitimate
• Emails pretending to be from banks, suppliers, or colleagues

What to do

Scan suspicious files using VirusTotal.

Do not click suspicious links

Check links before opening them

2. Fake Invoice Scams

In this scam, criminals send invoices pretending to be suppliers or service providers.

Common signs

• Unexpected invoices
• Payment details that suddenly change
• Requests for urgent payment

What to do

Check bank details before making payments.

Always verify invoices with the supplier

3. CEO Fraud / Business Email Compromise

Attackers impersonate senior staff and request urgent payments or sensitive information.

Common signs

• Emails pretending to be from directors or managers
• Requests for urgent payments
• Messages asking for confidential data

What to do

Implement clear payment approval procedures.

Verify requests using another communication method

4. Fake Website and Online Store Scams

Employees may be tricked into visiting malicious websites that look legitimate.

Common signs

• Websites offering deals that seem too good to be true
• Strange or unfamiliar domain names
• Poor spelling or design

What to do

Check suspicious websites using ScamAdvisory before entering information.

5. Malware Attachments

Attackers send infected attachments that install malware when opened.

Common signs

• Unexpected attachments
• Files with unusual extensions
• Emails asking you to download documents urgently

What to do

Scan files before opening.

Do not open attachments from unknown senders