Email security
Phishing and Business Email Compromise: Prevention Tips
Reduce phishing risk with MFA, verification procedures and staff awareness.
Recommended actions
- Treat unexpected invoices, account changes and urgent payment requests as suspicious.
- Verify bank detail changes using a trusted phone number, not the email thread.
- Require MFA and monitor suspicious sign-ins.
- Configure email authentication and train employees to report suspicious messages.
- If compromise is suspected, contain affected accounts and preserve evidence.
Every organization has different risks. These steps are a starting point, not a substitute for a scoped security assessment.