Increasing scams target businesses

A new report indicates that businesses lost around $3.8 million to scams throughout 2016.

The Australian Competition and Consumer Commission’s Targeting Scams report shows that almost 6000 businesses have reported being targeted by scams.

The highest losses were to computer hacking, fake investment schemes and buying and selling scams, according to reports made to Scamwatch over the past year.

“As recent events with the WannaCry ransomware scam demonstrates, businesses can be just as vulnerable to scams as anyone else in the community,” ACCC Deputy Chair Dr Michael Schaper said.

“Unfortunately ransomware scams like WannaCry targeting businesses are not uncommon — we’re seeing steep increases in scammers contacting businesses to swindle them out of their money with varying types of scams. Small businesses with fewer than 20 staff are in particular the most vulnerable to scammers and accounted for nearly 60% of reported losses.

“The vast majority (85%) of scammers make contact with businesses via email or phone, so it’s important for any business to be aware that these scams are out there in the community and to scrutinise any requests they receive for payment or sensitive information,” Schaper said.

Scamwatch reports the top three scams business should be aware of are:

• Ransomware: These scams trick a victim into downloading a virus that infects computer systems and prevents user access until payment is made to unlock it. In 2016, reports indicate that there was an increase in ransomware emails to businesses, purportedly from legitimate companies such as Australia Post or a utility provider.
• Business email compromise scams: These are a form of hacking scam which operates with the scammer obtaining access to a business email address. The scammer will then send an email (purportedly from senior management) to the business’s suppliers advising of new payment arrangements and requesting a wire transfer to the new account.
• Investment scams: These scams are promoted as business opportunities (eg, sports investment or stockbroker scams, superannuation schemes or managed funds) and promise inflated returns but are, in reality, nothing more than a method used to drain a business of its funds.

“Attacks on businesses where scammers try to trick, deceive or manipulate businesses into sending money or divulging confidential information continue to increase in both frequency and sophistication,” Schaper said.

“These scams often result in one-off losses that a business can recover from. However, hacking, malware and targeted phishing now present significant financial and reputational risks to business.”

Business owners should always scrutinise new requests for any payment and have a clearly defined process for verifying and paying accounts and invoices.

In addition, they should regularly back up their computer’s data on a separate hard drive so this can be easily reinstalled if their computer is infected by malware or ransomware.

Finally, they should ensure their computer has a firewall and up-to-date antivirus and anti-spyware software.

Image credit: ©lollo/Dollar Photo Club

Follow us on Twitter and Facebook