Protect Your Business From Common Email Scams
There are many types of online fraud, but email scams are among the most prolific. Thankfully, many people are now more aware of online scams, but email fraud is still rife and it often targets small business. Here are two of the most common types of email scams:
1 Domain name expiry scam
Malicious fraudsters have now started targeting .uk domain names with falsified domain expiry warnings. Sadly, many of those who fall for this latest domain name con are small firms, largely because they do their own in-house IT management and are not fully au fait with some of the technical aspects involved.
Unscrupulous online criminals are manipulating this lack of knowledge. Many websites receive emails that warn of an imminent domain name expiry. A lot of small businesses, fearing they’re about to lose their domain name, pay extortionate fees to renew their domain unnecessarily.
The emails are usually called something like ‘Domain Registry Services’. They warn of an urgent renewal being required and will state the charge for a renewal. This charge will be much more than an average renewal. It will also be completely bogus.
Many small businesses don’t keep accurate records of when they bought or last renewed their domain name and they probably will not remember the original charge. This is probably why this scam works so well. If you receive one of these emails and are in any doubt, contact Nominet.org.uk (the .uk internet registry at www.nic.uk).
2 Phishing and password theft
Most small businesses tend to manage and respond personally to business emails and can become targets for this renowned, but effective, email scam. ‘Phishing’ is the practice of attempting to gather sensitive, protected information by persuading someone to enter their private details online. The most common form of phishing scam is the fake bank email.
Internet criminals clone an official bank email address or manipulate the recipient’s email inbox into believing the email has come from a trusted source. Often the sender of these emails will appear to be the real company. The email will often say that “owing to a recent security threat to the business’s account, to ensure there has been no fraudulent activity”, the business must log in to its account with its username and password.
The email will contain a believable login section that mimics the real bank’s website template. If the business owner enters their details, online fraudsters can access a business’s private accounts and steal money or make unwarranted transactions in the business’s name. Real banks will never ask for personal account information via email, of course.
Trust Your Instincts
Be cynical. If an email just doesn’t seem right – don’t open it. Then report it. Many email providers enable you to report spoof emails and phishing attempts. One of the best things a small business can do is use an email provider with high-end junk and spam filters. Many cheap web-hosting services provide email services, but their filtering software may be substandard. It may be prudent to invest in a reputable web host or use a generic email provider such as Gmail, Hotmail or Yahoo!. If you receive a domain expiry email, contact your domain name supplier. It’s that simple. They won’t take umbrage.
There are many more scams other than the two I’ve mentioned. Caution, common sense and a little bit of knowledge will go a long way towards reducing the likelihood you’ll fall for an online dupe.
Post a Comment