Fraudsters are taking advantage of businesses in these uncertain times, with a surge in scams occurring amid COVID-19 disruptions.
“Criminals are taking opportunities because focus is being diverted by the virus, and many are now short of cash,” says Christo Snyman, national director of forensic services at Mazars.
Spoof emails with fake product offerings of masks or vaccines lead to phishing websites. “These emails come from seemingly realistic or reputable companies, manipulating people to click on links, and prompting the user to provide personal information that lands up in the hands of cybercriminals,” Christo said.
Phishing SMSs trick individuals into clicking on a link disguised as information about the COVID-19 outbreak, then steal credentials, Christo says. “There have been instances where these SMSs claim to provide free masks or pretend to be companies that have experienced delays in deliveries due to the virus,” he says.
Don’t fall prey…
- Do not click on links or icons in unsolicited emails or SMSs.
- Never reply to these emails/SMSs, and delete them immediately.
- Do not believe the content of unsolicited emails/SMSs blindly. If you are concerned about what is being alleged in the email, use your own contact details to contact the sender and confirm.
- Check that you are on the authentic/real site before entering any personal information.
- Regard urgent security alerts, offers or deals as warning signs of a hacking attempt.
- Do regular virus protection on systems.
- Ensure all staff regularly change their usernames and passwords.
- Maintain a good relationship with suppliers, and when bank details change, ensure you communicate changes to them telephonically.
- Be vigilant to protect money by taking steps such as ensuring money isn’t paid to fraudulent accounts, and that proper authorisation procedures are in place.
- Meet with all staff to explain this vulnerable period, and emphasise the importance of protecting the business against any fraudulent activities.