Employee Security Awareness: Stop Human-Targeted Fraud

Who attackers target

• Front desk / reception — fake deliveries, “IT needs remote access,” urgent visitor stories
• AP / bookkeepers — invoice fraud and CEO wires (BEC)
• HR / payroll — W‑2 phishing, fake direct-deposit changes
• Owners & assistants — MFA fatigue, travel urgency, secrecy requests
• Warehouse / retail floor — QR swaps, gift-card mule calls (retail guide)

Scripts employees hear

• “This is IT — install this remote tool now.”
• “The owner said to buy gift cards and read the codes.”
• “Payroll: update your deposit here” + phishing link
• “Vendor: our bank changed, pay this invoice today.”
• Unexpected MFA push: “Just approve so we can finish setup.”

Daily habits that work

• Hover/check sender domains; type URLs yourself for banking and payroll
• Never plug in found USB drives
• Deny unexpected MFA prompts; report password-possible compromise
• Lock screens when leaving a desk or POS
• Use company password manager + MFA
• Do not share one login across the team

Onboarding checklist (first week)

1. 1
   Named account + MFA before email access.
2. 2
   15-minute scam briefing with your top 5 real examples.
3. 3
   Payment authority map — who can approve what, and the callback rule.
4. 4
   Reporting path — who gets suspicious emails/calls (and that reporting is rewarded, not punished).
5. 5
   Industry add-on from the business hub.

How to report safely

Forward suspicious messages as attachments when possible (preserves headers). Do not click “unsubscribe” on phishing. If money or credentials may be involved, loop in finance and IT/MSP the same hour.

FAQ