Business email compromise (BEC), where criminals steal money by simply ‘asking for it’, is on the rise. According to an Interpol report, BEC is one of the top five digital threats in Africa – and South Africa is the most likely target, shouldering 34% of the continent’s attacks.

 

Ryan Mer, CEO of eftsure Africa, a Know Your Payee™ (KYP) platform provider, says these attacks can take many forms, but are typically orchestrated through emails that appear to come from legitimate sources. “In many cases, criminals intercept email accounts or pose as known clients or suppliers of an organisation and request the transfer of funds. While legislation like the Financial Intelligence Centre Act (FICA) and Protection of Personal Information Act (POPIA) requires the responsible gathering, scrutiny, and storage of information, BEC remains a threat to any organisation and its clients.”

 

Though antivirus programmes help to some degree, BEC requires user vigilance more than anything.

 

Here are three things you can do to avoid becoming a victim:

 

Education and training

BEC scammers most frequently target executives and other employees with access to company finances, though any employee can fall victim. Often, they will gain access to a company’s network via spear-phishingmalware and fake email accounts and websites. They may also spend long periods researching vendors, billing systems and even employees, especially top executives, and those in accounts payable.

 

“The most common trick is to select a legitimate invoice from a trusted associate or supplier and modify it, for example, by changing the bank account and contact details,” says Mer. “They will then send this ‘invoice’ to the target from an email address that looks similar to that of the associate, requesting payment. More sophisticated attackers will even find out when an executive is out of the office to send an email that looks like it’s from him or her to a targeted employee, requesting that money be urgently transferred.”

 

All employees should be equipped with skills and tools to spot threats and respond effectively. This should include systems to validate any changes in vendor payment details. If this is done by phone, ensure previously known phone numbers are used, not those in the email request. Encourage employees to actively verify money transfer requests, for example by walking into senior executives’ offices.

 

Protect with technology

Mimecast’s 2022 state of email security report found that 87% of South African organisations were made aware of a spoofing attack using a lookalike domain or website clone, with 17% seeing more than ten such attacks in the past year. For this and many other reasons, 98% of South African companies either use or plan to use a protection service this year, while 86% use or intend to use DMARC (domain-based message authentication, reporting and conformance) to protect their email domains from impersonation.

 

But email protection can only do so much. Independent third-party verification systems such as eftsure’s “Know Your Payee” solution can be much more effective by automating payment checking and supplier verification, saving time on manual processes and reducing human error. “Our fraud tech platform protects your organisation by verifying key supplier details, including the banking details you use to process electronic payments. Through payment screening, you can ensure that the account number is correct before releasing funds. This process makes sure that the funds are being sent to the legitimate recipient,” says Mer.

 

Email hygiene

Mer gives these email best practice tips to further reduce your risk:

  • Establish email rules that flag emails with extensions that are similar to company emails and emails where the “reply” email address is different from the “from” address shown. Colour coding and labelling can also help by automatically sorting internal from external accounts.
  • Implement privacy and security steps when you first create an email account for new staff members. This should include strong passwords at a minimum, preferably with multi-factor authentication as an extra layer of security.
  • Encrypt email messages to protect sensitive information by enabling secure/multipurpose internet mail extensions (S/MIME) on Outlook or Gmail. This not only protects the content of emails but uses digital signatures to verify the identity of the sender.
  • Use secure email gateway providers to block email-based threats like spam, viruses, malware, or denial of service attacks before they reach your mail server.
  • Regularly review activity and sign-ins on email accounts to identify any suspicious activity.

 

Leave a Comment

Your email address will not be published.

You may also like

Business News Security Society Technology Technology Trends

Airtel Nigeria Graduates First Cohort of Groundbreaking Open Talent Economy Program

post-image

 

Airtel Nigeria has marked a significant milestone with the graduation of the first cohort from its Open Talent Economy (OTE) program, an ambitious initiative aimed at preparing undergraduates for the evolving demands of the modern workforce.

The pioneering program welcomed 14 undergraduates from top institutions, including Pan Atlantic University, Lead City University, Federal University of Technology Akure, Oduduwa University, and the University of California. Over a period of 120 days, these young talents received hands-on field training and contributed to live projects, gaining direct experience in real-world business environments.

Dubbed “Airternship,” the OTE program serves as a mutual engagement platform, allowing Airtel Nigeria to connect with the ambitions and perspectives of the youth while equipping them with the skills needed to thrive professionally. The program reflects Airtel Nigeria’s commitment to nurturing future leaders by providing practical experiences that go beyond the traditional classroom setting.

“Airtel Nigeria’s mission is to give young talents…

Read More
Announcements Business Culture Economy Education News Security Society

Nigeria Data Protection Commission Partners with Social Media Influencer Enioluwa Adeoluwa to Boost Privacy Awareness

post-image

 

The Nigeria Data Protection Commission (NDPC) has taken a significant step in advancing data protection awareness in Nigeria by signing a Memorandum of Understanding (MoU) with popular social media influencer, Enioluwa Adeoluwa. This collaboration aims to reach Nigeria’s vast social media user base and promote awareness about data privacy rights and responsibilities.

During the signing, the National Commissioner and CEO of the NDPC, Dr. Vincent Olatunji, emphasized the scale of Nigeria’s social media engagement, noting that an estimated 40 million Nigerians interact online daily. He explained that the partnership with Enioluwa is designed to educate individuals about their privacy rights while reminding data controllers and processors of their obligations under Nigeria’s data protection regulations. “With Enioluwa’s extensive social media following, this partnership is poised to amplify the Commission’s message, expanding public understanding of our mandate and advancing our roadmap for awareness creation,” Dr. Olatunji stated.

Enioluwa expressed enthusiasm for the collaboration,…

Read More
Business Economy International News Society Software Technology Technology Trends Telecoms

Digital sovereignty: the key to data control, security, and independence

post-image

By Alex Galbraith, CTO, Cloud Services at SoftwareOne

Working with data can be a blessing and a curse. While it is the definitive factor that empowers digital transformation efforts, aids decision-making and stores an organisation’s most valuable and confidential assets, dealing with data is often a business’ greatest challenge. As the world’s dependence on data grows and the threat of cyberattacks increases, businesses need solutions that will them manage, govern, and safeguard their data more efficiently – and this is where digital sovereignty comes in.

Digital sovereignty helps people, businesses, and countries to stay in control of their digital assets and data. It goes beyond ownership of data – it means having full authority over everything from where and how data is stored and processed to fostering independence in technological development to enforcing local laws and regulations within the digital space. Ultimately, it offers businesses increased control, security, and…

Read More
Announcements Business Culture News Security Society Software Technology Technology Trends Telecoms

Zoracom Nigeria Honored for Cybersecurity Leadership and Telecom Excellence at the Tech Innovation Awards 2024

post-image

 

In an era where cyber threats are growing increasingly complex and sophisticated, Nigeria has found an invaluable ally in Zoracom Nigeria—a company dedicated to safeguarding the nation’s digital borders. At the recent Tech Innovation Awards 2024, Zoracom was celebrated for its extraordinary efforts in cybersecurity and telecom infrastructure, receiving the prestigious title of Auxiliary Telecom Infrastructure Support Provider of the Year.

The award comes as a recognition of Zoracom’s relentless pursuit of quality, innovation, and transformative solutions in an industry that is central to Nigeria’s technological advancement. The company’s state-of-the-art facility, the National Security Operations Center (NSOC), stands as a testament to its commitment to combating cyber threats at a national scale. Established with cutting-edge technology and staffed by a team of skilled professionals, the NSOC is one of the country’s most advanced operations centers, providing real-time monitoring and proactive threat management to mitigate potential cyber incidents.

Read More
Business Economy

The Art of Investment: The rise of African art (By Ngozi Akinyele)

post-image

By Ngozi Akinyele, Chief Marketing and Communications Officer, Coronation Group (www.Coronation.ng)

 

A diversified portfolio is one of the key metrics of investment success. The greater this diversity, the more likely it will outperform the market, and the savviest investors are often looking for new opportunities: the rising stars among new asset classes. Investment in art is certainly not a new concept, but what makes it unique is that it often has low correlation with other major asset classes, meaning lower overall price volatility (https://apo-opa.co/3UpJknE). It’s the sure bet, sometimes with incredible escalating value, especially for those opting to invest in blue-chip artists (https://apo-opa.co/3Uq6YQQ) renowned artists whose work demands high prices in the art market).

However, not all of us can afford to invest in the works of Picasso, Van Gogh, or Warhol, with many blue-chip pieces only accessible as…

Read More
Business Culture Economy

From Tech Addiction to Surviving Conflict: Global Conference in Doha Explores the Challenges Facing Arab and Global Families

post-image

Policies to protect families in countries affected by conflict, the global impact of population decline, and striking a balance between work and family life were placed in focus at the 30th Anniversary of the International Year of the Family Conference on Family and Contemporary Megatrends.

 

Organized by Qatar Foundations Doha International Family Institute (DIFI), in partnership with the Ministry of Social Development and Family, the Ministry of Foreign Affairs, and the United Nations Department of Economic and Social Affairs (UNDESA), the conference brought together more than 2,000 experts and policymakers from around the world to explore key trends affecting families, and policies and programs that strengthen the familys place at the heart of society.

 

The conference was attended by eminent figures from across the Arab world including Her Excellency Shanaz Ibrahim Ahmed, First Lady of Iraq; Her Excellency Maya Morsi, Minister of Social Solidarity, Egypt; Her Excellency Dr. Amthal Hadi Hayef Al…

Read More
Business Economy Education Government Investments Technology Technology Trends

Nigeria Secures N2.8 Billion Google Investment to Boost Digital Economy and AI Development

post-image

 

Dr. ‘Bosun Tijani, the Minister of Communications, Innovation, and Digital Economy, announced a significant N2.8 billion commitment from Google, aimed at accelerating Nigeria’s digital economy through strategic initiatives outlined in the ministry’s Strategic Blueprint. The announcement was made alongside Google’s President of EMEA Business & Operations, Matt Brittin, as the tech giant pledged to support Nigeria’s technological transformation.

Dr. Tijani highlighted four major initiatives that Google’s investment will fuel:No alternative text description for this image

  1. DeepTech Ready Upskilling Programme: Designed to enhance advanced technical skills, this program aligns with Nigeria’s 3MTT initiative, aiming to equip 20,000 Nigerians with expertise in Data Science and Artificial Intelligence (AI).
  2. Experience AI Programme: Targeting young learners aged 11-14, this initiative, co-developed with the Raspberry Pi Foundation and Google DeepMind, seeks to introduce AI fundamentals across Nigerian schools. Through this program, Google will train 25,000…
Read More
Business Culture Economy

Sanâa Kiadi Reflects on Participation in IOM Workshop on Migration Data in Rabat, Morocco

post-image

Sanâa Kiadi, a distinguished Global Strategist and International Executive, recently had the honor of representing the African Migration Observatory (AMO) at the Sub-Regional Workshop on Migration Data and Research, which took place on October 16th and 17th in Rabat, Morocco. This significant event was organized by the International Organization for Migration (IOM) in collaboration with the Government of Morocco, bringing together key stakeholders dedicated to advancing the understanding of migration dynamics in the region.

During her participation, Kiadi presented AMO’s mission, which is focused on enhancing migration data collection and analysis across Africa. Her presentation underscored the importance of establishing robust data systems that inform evidence-based migration policies. “Accurate and comprehensive migration data is essential for shaping policies that address…

Read More