BBB Business Tip: Online scammers are not your new cube mate
Businesses are vulnerable to online scammers, especially with the large number of remote workers who use company equipment from their homes.
BBB urges businesses to consider the following suggestions and implementations to avoid being victimized by online scammers:
Assess vulnerabilities: BBB's Business Email Compromise study outlines several ways that businesses are victimized. When employees are physically separated, in-person verifications for emails, texts, or similar requests involving financials or wire transfers are no longer possible. Phishing attacks expose millions to additional risks. Ensure your employees are aware of the risks and provide effective countermeasures. Put policies in place so that requests for financial information or transfers are verified first. Implement two-factor authentication wherever possible.
Staff training: If your company doesn't already have a security training program in place, now is the time to beef up staff training. It only takes one successful phishing attack to compromise a company’s network, steal millions of dollars or lose the trust of your customers.
HR Scams on the Rise: The FBI’s Internet Crimes Complaint Center (IC3) has noted an increase in complaints regarding Human Resource Department scams. This began back in 2015 when University Payroll Departments were targeted. A later twist involves HR Departments receiving calls or emails from a current employee asking to update their direct deposit or mailing information to receive paychecks. In reality, the request isn’t genuine, and the employee’s paycheck has just been stolen.
BBB urges businesses to implement a two-tiered verification process to avoid this. If an employee calls in from a number not on file, ask to call them back at the number listed with the business. Likewise, if email requests are received, call the employee to verify that the request is legitimate.
Impostor Scams: Impostor scams involve scammers stealing the name of a legitimate business and pretending to be them. These can take dozens of forms, but many involve employment scams, fake check or wire scams, mystery shopping scams, and more. If you believe your company has been impersonated, file a submission with BBB’s Scam Tracker. Based on the situation, BBB may be able to place an alert on your company’s business profile so you are not accused of potentially fraudulent behavior.
Identity Theft: Report all suspected instances of identity theft to the FBI’s IC3 Department. While many businesses are hesitant to admit that they have been compromised, investigators cannot pursue the criminals without the necessary information.
If you believe your business has been compromised, don’t wait. Take quick action to ensure that further exposure is limited and do not be afraid to ask for help.
For more information:
Search for network security companies on BBB.org.
Read about remote working policies in Canada.
For more business tips, go to BBB.org/BizHQ.
Still Need Assistance?
Contact Your Local BBB
Your local Better Business Bureau can assist you with finding businesses you can trust. Start With Trust®.
Additional Resources
Central Ohio BBB Business Podcast