Deceitful email hooks Finance should watch for in 2020
Despite all the warnings your finance staff hears about email scams, it’s all too easy for them to forget those warnings during a busy workday.
They’re cutting checks, answering customer queries, opening emails … and all of a sudden, a staffer realizes he just clicked on what could be a malicious threat.
A change in tactic
At most companies, CFOs and IT leaders actively work to keep staffers abreast of email scams and threats. So, why are scams still so easy to fall for?
Criminals aren’t sticking to just classic approaches, like fake wire requests from the CEO, to trick your finance staff into sharing private data or sending unauthorized payments. More and more, they’re using seemingly innocent email hooks and subject lines, found a new 2020 report from the security experts at Proofpoint.
Example: An A/P staffer may be automatically suspicious of an “urgent” payment request from an “executive” at their company. They’d be wary of clicking any links or opening any attachments. But if that same A/P staffer got a message with an “updated company policy or plan” from “HR,” they might not think twice about clicking a link or opening an attachment.
‘Most successful’ email hooks
In its report, Proofpoint assessed what kind of duplicitous email subject lines criminals used – and staffers actually fell for. Some of the most successful email hooks Proofpoint identified were:
- SharePoint document
- scanned from a Xerox Multifunction Printer
- dealer proposal
- updated building evacuation plan
- confidential document
- [first name], please add me to your LinkedIn network
- lost watch, and
- lost ring.
Given all the dispersed work and business disruption due to the coronavirus pandemic, it’d be good to bring this to your finance staff’s attention. Remind them criminals may try to get their guard down with “harmless” emails they wouldn’t think twice about opening. And share the list of most successful subject lines, so they get familiar with real-life examples of email hooks to look out for.
- Share on
Free Training & Resources
Further Reading
Looks like company executives are damned if they do and damned if they don’t report a financial violation committed by their companie...
Adopting AI in the workplace is going to be a struggle unless attitudes about the controversial technology improves. And there’s no g...
Client companies thought they were outsourcing payroll and HR compliance to a vendor. But the tax exposure never really left their books. ...
The Federal Trade Commission (FTC) just widened its crackdown of so-called junk fees that mislead the buying public. A proposed rule would ...
Cybercriminals who are out to steal your company’s money are getting smarter. Even a password that uses a capital letter, at least one nu...
A recent payroll tax fraud sentencing in Pennsylvania shows how off-the-books wage practices can expose a business to criminal charges and ...
