Scam is a polite word for criminal fraud... and there’s nothing polite about being ripped off

You’re having a good day at work when your phone rings and you see a number beginning with 0203, a London designation. Knowing you have some clients there, you pick up the call and are alarmed to hear a voice say this:

“You have outstanding debts of ￡1968.23 owing to HMRC. There is a warrant out for your arrest. Ignoring this information will be considered an initial attempt to avoid an appearance before the magistrate judge and will lead to a National Insurance number suspension. Your case ID is CPD 11692021. For more information on your case, please call our investigation department on 0203 1234567. “

Wow. Sounds serious, doesn’t it. If you take the message at face value and act on it, the consequences could well be a serious dent to your finances, at the very least. Scammers love to pose as a business representative, bank official or government agent to pressure you into sending them money or personal information. You may have the clarity of thought to know that what you’re listening to or reading is the work of scammers, but how can you be sure that your staff members and colleagues will share your scepticism and not be fooled into acting inappropriately?

So, working on the basis that ‘forewarned is fore-armed’, let’s look at some of the steps you can take to keep your business safe from the malicious clutches of scammers, hackers, cybercriminals and identity thieves. It starts by identifying where you may be at risk from their attention and taking actions to keep them out. Here are some suggestions:

Keep bank accounts secure

If you run a SME, keep your personal and business bank and credit card accounts separate so that at worst, hackers can only gain access to one account, and not both. Make sure you are actively using all of the security systems your bank uses for online banking. If staff members carry a company credit card, make sure it’s covered by fraud protections, such as automatic alerts if spending exceeds a certain amount.

Safeguard your computer systems

Hackers crack computers. So make sure you have a robust firewall to help protect your company data, and up-to-date antivirus software that will detect any attempts to breach your system. If in doubt, call the High Performance Networks team on 028 9053 8411. We’ll be happy to point you towards a suitable solution. Make it a rule that employees must create passwords that are difficult to decipher and also change their passwords every 60–90 days. And don’t forget the train them on the parameters for generating strong passwords.?Back up your files, ideally each day, but at least every week and store the data offsite. Then if the worst happens, you'll be able to restore your data quickly.

Enhance your in-house security

Why not run a background check when recruiting new staff? That way you’ll know that they’re not only qualified, but also trustworthy - make sure you obtain proper permission to run the check. Ask yourself how easy it is to keep out unwanted visitors. It might make sense to invest in key-card system. That way you can monitor movement in and out of your premises, but also restrict access to sensitive areas, for example, allowing only IT managers inside the server room.

Educate your staff and yourself

When it comes to defending your organisation against fraud, knowledge is power. So keep your staff informed and involved through regular training sessions that update them on current security threats and what they can do to minimise them. Create clear policies around the use and handling of confidential data and make sure all staff are aware of them.

A good starting point on preparing and responding to a cyber threat is to download the?Small Business Guide to Response and Recovery?Produced by the National Cyber Security Centre (NCSC), it gives SMEs clear guidance about how to prepare their response, and plan their recovery to a cyber incident. You will also find useful advice and information here:

https://www.actionfraud.police.uk/scam-emails

https://www.actionfraud.police.uk/news/scam-phone-call-warning

If you are concerned about any of the issues raised here and would like impartial advice on the steps you can take to minimise fraud or cyber attacks, call me, Paul Hagan, or any member of the High Performance Networks team on 028 9053 8411.?