For teams

Protect your business

Most of the harm we see is not a Hollywood hack. It’s a hurried payment, a lookalike domain, or a voice that sounds like someone you trust. A short written process will do more than a new logo in the footer.

• Verify money on a known channel

  New payees and bank-detail changes get a call-back on a number you already have, or an in-person check. Not on the number in the email.

• Two people beat one urgent request

  Dual approval — or one person plus a documented call-back — applies even when the request appears to come from the founder.

• Lock the mailbox that can move money

  Multi-factor authentication on email and on admin tools. Watch for odd forwarding rules on executive inboxes.

• Make reporting safe and obvious

  Staff should know where to forward a suspicious message, and that they will not be punished for a false alarm.