Police warn Business to watch for email, invoice scams.

<h3 style="color: rgb(28, 30, 41); background: transparent none repeat scroll 0% 0%; margin-top: 0pt; margin-bottom: 0pt;">Head of Irish Police (Garda) National Cyber crime warns </h3>

They were settling what looked like legitimate invoices from real suppliers. One company lost €200,000 and the other €453,000, gardaí said on Monday.

The criminals send emails to businesses and individuals from whats looks like the real supplier. The emails request firm to change the bank account details on record for the supplier to a new bank account, controlled by the criminals. These requests can also come by way of letter or phone call.

They don't know it is a victim of this scam until the legitimate supplier sends a reminder invoice seeking payment, gardaí said.

All of this has been “scaled up significantly in recent times” although it was always there. Two firms we contacted were scammed for €38,000 and €35,000 in separate fraud attacks. Check out <a class="_e75a791d-denali-editor-page-rtfLink" href="https://besecureonline.co.uk/Products/Business/Bitdefender-Gravityzone" style="color: rgb(28, 30, 41); background: transparent; margin-top:0pt; margin-bottom:0pt;; color: #4a6ee0;" target="_blank">Gravityzone</a>. The scammers broke into and compromised the email system to fake the invoices.

Currently faking invoices is more effective and lucrative for criminals than ransomware where criminals shut down computer systems and will only restart them once a ransom is paid. There is also no guarantee that the system will restart and operate normally.

<h3 style="color: rgb(28, 30, 41); background: transparent none repeat scroll 0% 0%; margin-top: 0pt; margin-bottom: 0pt;">Catastrophic</h3>

Detective Chief Superintendent Pat Lordan Garda National Economic Crime Bureau said: “This can be catastrophic and result in the closure of businesses and redundancies”. He says pick up the phone and speak to somebody in the invoicing company. Also consider using technology like <a class="_e75a791d-denali-editor-page-rtfLink" href="https://besecureonline.co.uk/Products/Business/Spamina-Email-Protection" style="color: rgb(28, 30, 41); background: transparent; margin-top:0pt; margin-bottom:0pt;; color: #4a6ee0;" target="_blank">Spamina</a>, advanced threat protection, and end-point protection

Our advise here, “Assume all emails incoming and outgoing in your company are always being read by criminals, fraudsters for long extended periods and that those responsible for payments within your company are a special target for hackers and their email activity, history is being monitored. Many of these criminals will have access to the CRM system like SAP”. 
This is ultimate <a class="_e75a791d-denali-editor-page-rtfLink" href="https://besecureonline.co.uk/Blog/entryid/39/protecting-yourself-from-phishing-scams-what-to-look-out-for" style="color: rgb(28, 30, 41); background: transparent; margin-top:0pt; margin-bottom:0pt;; color: #4a6ee0;" target="_blank">Phishing</a>

Incoming email addresses need to be checked. Simple changes, such as swopping, adding or deleting letters in a mail address are commonly used to fool a business into thinking the invoice is coming from a genuine source.

<h3 style="color: rgb(28, 30, 41); background: transparent none repeat scroll 0% 0%; margin-top: 0pt; margin-bottom: 0pt;">Most companies still don't report cybercrime</h3>

We know for a fact most organisations hit by this scam will not report theft fearing severe reputational loss, resulting in suppliers, customers no longer being prepared to deal with them. Requests to change Bank details need to be treated sceptically. Advanced Threat protection is

Gardaí estimated at least €4.4 million had been stolen in such scams with €1.28 million recovered by gardaí. 
<img alt="invoice scam, email fraud, cyber crime, more effective than rasnsomware, Police warn, Garda warn business" src="/Portals/0/Business/distraught-businesswoman.jpg" style="width: 100%; height: 100%;" title="invoice scam, email fraud, cyber crime, more effective than rasnsomware, Police warn, Garda warn business" />

1. Do you know the email contact, make direct personal contact.

2. Check email address used is correct. Check for basic English mistakes.

3. Do a small transfer to the new account, of say €0.10, the check the sum has landed in their bank account. If not, do not proceed.

6. Report to the gardaí, and to your ISP (internet service provider) if received electronically.