Internal fraud<\/strong>
<\/p>\n\n\n\n
More often than not many companies realise fraud is perpetrated from within. According to the Global Economic Crime and Fraud Survey, 41% of economic crimes in South Africa are committed by employees, compared to only 36% by external fraudsters and 21% a collusion between the two.<\/p>\n\n\n\n
\u200b<\/p>\n\n\n\n
\u201cEmployees have access to internal systems and knowledge of internal processes, and so they know where any vulnerabilities lie in your organisation\u2019s internal controls,\u201d explains Mer.<\/p>\n\n\n\n
\u200b<\/p>\n\n\n\n
Some ways they can scam your organisation include:<\/p>\n\n\n\n
Changing the banking details of suppliers, rerouting funds to their own account or an accomplice\u2019s account. This happens especially with ad hoc suppliers.
<\/p>\n\n\n\n
Adding fictitious suppliers or employees onto the payroll or colluding with suppliers to issue fake invoices.
<\/p>\n\n\n\n
Submitting illegitimate reimbursements for expenses.
<\/p>\n\n\n\n
Issuing fake refund payments to customers.
<\/p>\n\n\n\n
\u200b<\/strong><\/p>\n\n\n\nSocial engineering<\/strong>
<\/p>\n\n\n\n
Social engineering is the attempt to convince a person to perform an action or divulge information against his or her own interests and forms the basis of many scams. \u201cIt is a tool used to manipulate targetsby relying on human impulses of being helpful, avoid conflict and problem-solve quickly,\u201d reveals Mer. \u201cBy deceiving an employee into revealing confidential information, the way is paved for scammers to initiate fraud against your organisation.\u201d<\/p>\n\n\n\n
\u200b<\/p>\n\n\n\n
In an example scenario, a scammer could contact your accounts payable team and pretend to be a supplier trying to update their banking details on your system. The next time you pay the supplier, the funds are sent to a bank account controlled by the scammer.<\/p>\n\n\n\n
\u200b<\/strong><\/p>\n\n\n\nBusiness email compromise (BEC)<\/strong>
<\/p>\n\n\n\n
These scams are on the increase due to the ease of attack combined with the problem of staff being unable to tell the difference between real and fake emails. The FBI\u2019s Internet Crime Complaint Centre says losses from BEC scams topped $12billion globally in 2018, with97% of losses attributed to \u2018false billing\u2019 scams. One form of BEC is supplier email compromise, which involves fraudsters first infiltrating the email systems of the target companies\u2019 suppliers and then using that access to imitate the supplier company and send the target company fraudulent emails.<\/p>\n\n\n\n
\u200b<\/strong><\/p>\n\n\n\nImpersonations<\/strong>
<\/p>\n\n\n\n
Mer says that advances in artificial intelligence are making it easier for fraudsters to use impersonation to their advantage. One of the ways they do this is by creating realistic audio and video impersonations. They feed an audio or video sample of your organisation\u2019s CEO or CFO into a software programme and create a fake recording of that person giving payment instructions to accounts payable staff. This message is then sent to unsuspecting staff, who make the payment, unaware that the message is fake.<\/p>\n\n\n\n
\u200b<\/p>\n\n\n\n
Social media also plays a role here, particularly LinkedIn, which fraudsters use to create fake profiles and impersonate legitimate businesspeople.<\/p>\n\n\n\n
\u200b<\/p>\n\n\n\n
Phishing<\/strong>
<\/p>\n\n\n\n
Email is the favoured medium for phishing. Usually, a message is designed to get its reader to download a file or click on a link. By clicking or downloading, the unsuspecting employee unintentionally infects the organisation\u2019s IT systems with malicious software or gives away confidential information.<\/p>\n\n\n\n
\u200b<\/p>\n\n\n\n
To inspire action, phishing messages either warn readers of account inactivation or cancellation or threaten financial losses if the message is not acted on, or cause alarm by reporting suspicious account activity.<\/p>\n\n\n\n
\u200b<\/strong><\/p>\n\n\n\nPayments scams are becoming increasingly sophisticated, requiring extreme vigilance from accounts payable staff. Your organisation\u2019s best defence is to share information on what to look out for, keep up to date on the latest scams and review your company security controls. Making a big difference in many organisations\u2019 security systems is eftsure\u2019s SaaS platform, which digitises and automates key checks and processes that would otherwise be vulnerable to manipulation. \u201cThrough our KYP technology, the verification of payees and eft payment data is done on a continuous basis, protecting companies from fraudulently changed or maliciously altered payee information,\u201d concludes Mer.<\/p>\n\n\n\n
\u200b<\/p>\n","protected":false},"excerpt":{"rendered":"
\u200b \u200b The truth is, all businesses are at risk of being scammed at some point, and just one incident can cost a company millions of Rand. Ryan Mer, CEO, eftsure Africa, a Know Your Payee\u2122 (KYP) platform provider, says that fraudsters are constantly finding new ways to exploit vulnerabilities and attack corporate payment systems […]<\/p>\n","protected":false},"author":1,"featured_media":6438,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[82,83],"tags":[],"class_list":["post-6437","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","category-technology-trends"],"_links":{"self":[{"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/posts\/6437","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/comments?post=6437"}],"version-history":[{"count":0,"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/posts\/6437\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/media\/6438"}],"wp:attachment":[{"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/media?parent=6437"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/categories?post=6437"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techandbiz.com.ng\/tab-backup\/wp-json\/wp\/v2\/tags?post=6437"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}