Business email compromise (BEC), where criminals steal money by simply ‘asking for it’, is on the rise. According to an Interpol report, BEC is one of the top five digital threats in Africa – and South Africa is the most likely target, shouldering 34% of the continent’s attacks.

 

Ryan Mer, CEO of eftsure Africa, a Know Your Payee™ (KYP) platform provider, says these attacks can take many forms, but are typically orchestrated through emails that appear to come from legitimate sources. “In many cases, criminals intercept email accounts or pose as known clients or suppliers of an organisation and request the transfer of funds. While legislation like the Financial Intelligence Centre Act (FICA) and Protection of Personal Information Act (POPIA) requires the responsible gathering, scrutiny, and storage of information, BEC remains a threat to any organisation and its clients.”

 

Though antivirus programmes help to some degree, BEC requires user vigilance more than anything.

 

Here are three things you can do to avoid becoming a victim:

 

Education and training

BEC scammers most frequently target executives and other employees with access to company finances, though any employee can fall victim. Often, they will gain access to a company’s network via spear-phishingmalware and fake email accounts and websites. They may also spend long periods researching vendors, billing systems and even employees, especially top executives, and those in accounts payable.

 

“The most common trick is to select a legitimate invoice from a trusted associate or supplier and modify it, for example, by changing the bank account and contact details,” says Mer. “They will then send this ‘invoice’ to the target from an email address that looks similar to that of the associate, requesting payment. More sophisticated attackers will even find out when an executive is out of the office to send an email that looks like it’s from him or her to a targeted employee, requesting that money be urgently transferred.”

 

All employees should be equipped with skills and tools to spot threats and respond effectively. This should include systems to validate any changes in vendor payment details. If this is done by phone, ensure previously known phone numbers are used, not those in the email request. Encourage employees to actively verify money transfer requests, for example by walking into senior executives’ offices.

 

Protect with technology

Mimecast’s 2022 state of email security report found that 87% of South African organisations were made aware of a spoofing attack using a lookalike domain or website clone, with 17% seeing more than ten such attacks in the past year. For this and many other reasons, 98% of South African companies either use or plan to use a protection service this year, while 86% use or intend to use DMARC (domain-based message authentication, reporting and conformance) to protect their email domains from impersonation.

 

But email protection can only do so much. Independent third-party verification systems such as eftsure’s “Know Your Payee” solution can be much more effective by automating payment checking and supplier verification, saving time on manual processes and reducing human error. “Our fraud tech platform protects your organisation by verifying key supplier details, including the banking details you use to process electronic payments. Through payment screening, you can ensure that the account number is correct before releasing funds. This process makes sure that the funds are being sent to the legitimate recipient,” says Mer.

 

Email hygiene

Mer gives these email best practice tips to further reduce your risk:

  • Establish email rules that flag emails with extensions that are similar to company emails and emails where the “reply” email address is different from the “from” address shown. Colour coding and labelling can also help by automatically sorting internal from external accounts.
  • Implement privacy and security steps when you first create an email account for new staff members. This should include strong passwords at a minimum, preferably with multi-factor authentication as an extra layer of security.
  • Encrypt email messages to protect sensitive information by enabling secure/multipurpose internet mail extensions (S/MIME) on Outlook or Gmail. This not only protects the content of emails but uses digital signatures to verify the identity of the sender.
  • Use secure email gateway providers to block email-based threats like spam, viruses, malware, or denial of service attacks before they reach your mail server.
  • Regularly review activity and sign-ins on email accounts to identify any suspicious activity.

Leave a Comment

Your email address will not be published.

You may also like

Business Culture Opinion Society

INTL. WOMEN DAY: NITDA IMPLEMENTS INITIATIVES TO BRIDGE GENDER DIVIDE

post-image

 

The Director General, National Information Technology Development Agency (NITDA), Kashifu Inuwa, CCIE has said that the Agency has been implementing several initiatives and programmes aimed at bridging the gender divide that exists in the Information Technology sector.

The Director General made this disclosure through his Special Adviser on Innovation and Strategy, Mrs. Iklima Musa at a programme in Abuja organised by the African School of Economics, (ASE) in partnership with African Women Entrepreneurship Programme, (AWEP) to commemorate the World International Women’s Day with the theme “Embrace Equity: Cracking the Code”.

Inuwa informed that part of the programmes the Agency has embarked on to bridge the gender divide was a training organised on the 7th of this month where the agency trained 200 women in digital marketing, digital entrepreneurship and 3D painting and “we are planning to train another 200 women this month and the next,” he revealed.

He said that, “There is…

Read More
Business Economy Energy

Transmission Substation Groundbreaking: Minister Rallies Support for APC

post-image

 

The Minister of Information and Culture, Alhaji Lai Mohammed, has performed the groundbreaking ceremony for the installation of 1 x 60MVA Transmission substation in Oro, Irepodun Local Government Area of Kwara State, with a call on the people of the state to sustain their support for APC in the forthcoming governorship and House of Assembly elections.

Speaking at the occasion on Thursday, Alhaji Mohammed, who was accompanied by the Managing Director of the Transmission Company of Nigeria, Engr. Sule Abdulazeez, the Council of traditional chiefs and some APC stalwarts in the state, said the project would lead to improved power supply to Oro and its environs, boost economic activities, especially for artisans and small and medium scale businesses, and enhance the social development of the people.

He therefore implored the people of the community to ensure peace and security in order to enable the contractor to deliver the project within the…

Read More
Announcements Business Investments Software Technology

Hyperspace Technologies Introduces Keymaster VAULT: A Low-Cost, NFC- Based Hardware Wallet for the African Market 

post-image

Hyperspace Technologies (https://hyperspace.ng), a Lagos-based Web3 startup specializing in next-level smart security infrastructure and key management systems, today announced the launch of its groundbreaking product, the Keymaster VAULT (https://keymaster.ng).

Designed to cater to the African market, Keymaster VAULT is a secure, NFC-based hardware wallet that stores private keys offline, offering an affordable and user-friendly alternative to expensive and complicated traditional hardware wallets.

Leveraging the simplicity of Near Field Communication (NFC) technology, the Keymaster VAULT allows users to securely access their digital assets by merely tapping their NFC-enabled devices.

This eliminates complex installation processes, making the wallet an ideal choice for both cryptocurrency novices and experienced users. With offline storage of private keys, the wallet significantly reduces the risk of hacks and malware attacks associated with online storage.

“We wanted to…

Read More
Business Economy Investments News Opinion

Currency slump sees surge in demand for dollars assets in West Africa despite greenback’s ongoing strength (By Abiodun Adebimpe)

post-image

The Russian-Ukraine war and the lingering impact of the COVID-19 pandemic have severely weakened West African economies and currencies – but businesses and investors are looking to dollar assets to mitigate the damage.

 

As most West African economies are commodity-driven, any development within the global economy that affects the supply and/or demand of commodities imports and exports portends significant currency weakening effects on the economies.

 

Recent and ongoing global events have created massive demand destruction in crude oil, agricultural products and precious metals such as gold. Supply chains are also still to recover.

 

As a result, most West African currencies such as the Nigerian Naira (NGN) and the Ghanaian Cedis (GHC) have significantly weakened.

 

It is a major source of concern – and an ongoing challenge- for most Nigerian businesses and those in other West African countries.

 

Fiscal and monetary imbalances compound the problem.

 

The import-dependent nature of most West African markets implies huge demand…

Read More
Business Culture

Appearance will give you a leg in the room – Fola Daniel Adelesi

post-image

 

Several years ago, a company was going to run a corporate event at one of the prime hotels in Lagos. You probably already have an idea of the location or possible locations. You may understand the fanfare that will accompany that kind of event. We all know that half of the activities will not be needed or noticed but they still go into the event anyway.

Sometimes, the organizers are scared of failure and you can tell from their facial expressions or tones when they talk to you over the phone. They want a perfect event and they sometimes want to see that perfection in you as a vendor. The implication is that you have to be the one allaying fears by demonstrating the perfection they want to see.

I saw the ad for this company’s event and decided to bid to compere the event. I had experience on my side…

Read More
Announcements Business Economy Events Fintech International Technology Technology Trends Telecoms Travels Trends

Global tech pioneers and innovators look to supercharge double-digit business growth across Africa

post-image

 

International powerhouse brands turn to inaugural GITEX Africa 2023 as launchpad to scale operations in the world’s next biggest digital economy

Global tech pioneers and innovators are preparing to supercharge double-digit business growth across Africa, as they eagerly anticipate the debut of the continent’s largest and most inclusive tech and start-up event in Marrakech, Morocco.

GITEX Africa will open doors for the first time from 31 May-2 June 2023, welcoming 500 exhibitors and 400 start-ups from 95 countries, with regional and international companies exuberant about the potential of the world’s rising tech continent, and the opportunities amplified by Africa’s ongoing Digital Transformation Strategy.

Among those spearheading the charge into African tech’s showpiece event is Japanese headquartered Epson; American giants Autodesk, Honeywell, Hewlett Packard, Dell, ESRi, Nutanix, Cisco and Shure; Lenovo, Huawei, and TP Link from China; along with DP World and the Technology Innovation Institute from the UAE.

With the African Union’s bold…

Read More
Art Business Culture

How Mykmary Fashion Boss, Michael Onyemah Keeps  Empowering Fashion Entrepreneurs to Succeed in Business.

post-image

.

The fashion industry is growing in leaps and bounds in Nigeria, worth billions of dollars annually, but many of the small players in the industry are not benefiting from this exposure and boom.

For many fashion enthusiasts, pursuing a career in the fashion industry seems like a dream come true. The idea of designing beautiful garments and creating unique styles that make people feel confident and beautiful is what draws many to the industry. However, it takes more than just creativity and passion to succeed as a fashion entrepreneur. It requires a solid understanding of business principles and strategies that can help drive sales and grow a successful fashion business.

Speaking to a group of journalists during a press conference, the founder and chief executive officer of Mykmary Fashion House, Micheal Onyemah, said “in today’s fashion industry, to sustain a fashion business over time, it is necessary to have a steady…

Read More
Business Economy Government Technology Technology Trends Telecoms

NCC approves harmonized short codes, directs implementation

post-image

 

In line with its consumer-centric approach to telecoms regulation, the Nigerian Communications Commission (NCC) has directed mobile network operators (MNOs) to commence implementation of approved harmonised short codes (HSC) for providing certain services to telecom consumers in Nigeria.

The Commission has already set a deadline of May 17, 2023, for all mobile networks to fully migrate from hitherto diverse short codes to the harmonised codes.

The use of harmonised short codes is aimed at achieving uniformity in common short codes across networks. This means that the code for checking airtime balance is the same across all mobile networks for the same function, irrespective of the network a consumer uses.

With the new codes, the telecom consumers using the over 226 million active mobile lines in the country, can now use the same codes to access services across the networks.

Consequently, under the new harmonised short codes regime, 13 common short codes have been…

Read More