This is general educational guidance, not an assessment of your business or a guarantee of security. Check the original sources and your specific requirements before acting.
The common warning signs
Look for unexpected changes to bank details, urgent transfer requests, unfamiliar links and pressure to bypass normal procedures. A message can still be fraudulent when the wording and logos look correct.
Verify through a trusted channel
If a supplier asks to change payment details, call using a previously verified number, not the number in the suspicious message.
- Check supplier payment changes independently.
- Do not use login links from unexpected messages; open the service yourself.
- Never reveal one-time login codes to an unsolicited caller.
When an AI voice or video seems familiar
AI-generated audio or video can make impersonation more convincing. For significant payments or account changes, follow a known approval and callback process rather than trusting how a person sounds or looks.
If you have already acted
Contact the bank immediately if money was sent. If account access might be compromised, secure the account through the legitimate provider and report the incident.
Read the original guidance
The links below are from the original publishers. This article is independently written by TASII and does not imply endorsement.
- Phishing scamsACCC Scamwatch · See source
- Business email compromise scamsACCC Scamwatch · See source
- Defending against AI-enabled cyber attacks: Guidance for small businessesASD’s Australian Cyber Security Centre · July 2026
- Recover from business email compromiseASD’s Australian Cyber Security Centre · 8 September 2026
