Falls Technology ServicesMost break-ins at small businesses don't start with clever hacking. They start with one convincing e-mail. The good news: three quick checks catch almost all of them.
1. Check the real address, not just the name
Anyone can put any name on an e-mail. Tap or hover over the sender's name to see the actual address. "Your Bank" sending from [email protected] is not your bank. Watch for look-alikes too: an extra letter, a swapped letter, or a different ending.
2. Watch for pressure
Scams want you to act before you think. Red flags:
- "Pay this today or your account will be closed"
- "We've changed our bank details, please use these for the invoice"
- "I'm in a meeting, buy gift cards and send me the codes"
- "Keep this between us"
A request to change where you send money is the most expensive one to fall for. Always confirm it by phone, on a number you already have, never one from the e-mail.
3. Don't trust the link
Hover over a link (or press and hold on a phone) to see where it really goes. Better still: don't use the link at all. Open the website yourself or use the company's app. If an e-mail says your account has a problem, the problem will be there when you sign in normally.
If you already clicked
- Don't panic, and don't type anything else into that page
- Change the password of the account it pretended to be, from your own device
- Turn on two-step sign-in for that account
- If you entered bank or card details, call your bank straight away
Not sure about an e-mail? Forward it to us before you click anything, and we'll tell you whether it's real.
Need a hand?
More about our business e-mail and domains help. Or tell us what's going on and we'll get back to you.
Send us a message or call (208) 745-2981, Monday to Friday, 9 to 5.