{"id":3949,"date":"2018-03-13T10:00:17","date_gmt":"2018-03-13T10:00:17","guid":{"rendered":"https:\/\/www.sage.com\/en-gb\/blog\/?p=3949"},"modified":"2025-07-14T13:41:49","modified_gmt":"2025-07-14T12:41:49","slug":"fraud-prevention","status":"publish","type":"post","link":"https:\/\/www.sage.com\/en-gb\/blog\/fraud-prevention\/","title":{"rendered":"How to prevent your business from falling victim to fraud"},"content":{"rendered":"
\n\t
\n\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\tStrategy, Legal & Operations<\/a>\t\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\t

\n\t\t\t\t\t\tHow to prevent your business from falling victim to fraud\t\t\t\t\t<\/h1>\n\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t<\/p>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t<\/div>\n\t\t

\n\t\t
\n\t\t\tPublished
\n\t
\n\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n\t\t\t\n\t\t\t\t\"\"\t\t\t\tDarren Hockley<\/span>\n\t\t\t<\/a>\n\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t<\/div>\n<\/div>\n\n\n\n\n\n

When it comes to information security, protecting our personal and financial information from fraud is usually one of the highest priorities for businesses and individuals alike.<\/p>\n\n\n\n

After all, it\u2019s no coincidence that more than half (54%) of FTSE 350 companies list the risk of cyber-attacks<\/a> as their number one concern.<\/p>\n\n\n\n

What\u2019s more, for organisations that are entrusted with consumers\u2019 personal data, a data breach could mean more than financial losses \u2013 it could mean the loss of trust between the business and their client base, trust that can be extremely difficult to regain.<\/p>\n\n\n\n

Unfortunately, the truth is that there are many ways for businesses to fall victim to fraud.<\/p>\n\n\n\n

Research shows that criminals are increasingly relying upon compromised personal and financial information to carry out their fraudulent activity, and businesses need to be aware of the ever-more sophisticated tricks fraudsters engage in to con their employees into divulging sensitive company information (such as phishing scams, supplier impersonation and data hacking).<\/p>\n\n\n\n

Criminals specialising in invoice fraud, for example, will often be more aware of the details of the relationship between customer and company or company and supplier than the employee they are dealing with.<\/p>\n\n\n\n

They may know when regular payments are due and for how much, and be able to convincingly talk their way around unsuspecting staff members.<\/p>\n\n\n\n

To mitigate the risk of your employees falling foul of fraudulent activity, it\u2019s important to employ a culture of security and training \u2013 and to test their knowledge on a regular basis.<\/p>\n\n\n\n

Keeping awareness and confidence levels high is the most effective way to safeguard against data security threats and eliminate user errors.<\/p>\n\n\n\n

Internal fraud threats<\/strong><\/h2>\n\n\n\n

Did you know the biggest threat to your organisation\u2019s data security can often be your own employees? Attacks targeting payment information for example, such as false invoicing or unsecured payment pages, are often specifically designed to exploit knowledge gaps in your employees\u2019 experience and their confidence levels.<\/p>\n\n\n\n

Furthermore, although they seem like simple mistakes to make, some of the most common attacks can occur because of things such as weak or reused passwords, phishing emails or texts, and improper internet or email use \u2013 such as clicking on unknown links or accessing unauthorised websites.<\/p>\n\n\n\n

As well as web-savvy employees and strong password skills<\/a>, things to look out for when considering how secure your organisation really is include your office space, particularly documents and devices.<\/p>\n\n\n\n

If your employees\u2019 desks look cluttered, filing cabinets are left unlocked and company laptops, mobile phones or USBs are left lying around, this points to a much bigger issue than just a messy office.<\/p>\n\n\n\n

Bear in mind that once a hacker has physical possession of a sensitive document or device, it\u2019s only a matter of time before they gain access to more.<\/p>\n\n\n\n

It\u2019s also important to monitor employee access to data in your organisation. This is because it\u2019s far more secure to grant access to a database of sensitive information on a \u201cneed to know\u201d basis rather than to everyone in the company, for example.<\/p>\n\n\n\n

Data should also be regularly updated, cleaned and screened so information that\u2019s no longer necessary to keep is not accessible. Additionally, employees should not be emailing themselves copies of files or spreadsheets to work on from home.<\/p>\n\n\n\n

Using personal email in this way is one more unnecessary risk and it\u2019s important for all organisations to have a clear remote working policy. Utilising\u00a0cloud accounting software<\/a>, for example if they needed to check financials, could help to combat that, allowing your employees to access their work documents on any device \u2013 be it a desktop, laptop, tablet or mobile phone \u2013 while at home.<\/p>\n\n\n\n

Training to stay safe from fraud<\/strong><\/h2>\n\n\n\n

Michael Cobb, founder and managing director of Cobweb Applications, notes that an effective training programme “has to make it clear that information security is an integral part of everyone’s job with ownership, responsibility and accountability for risk made obvious in policies and job descriptions\u201d.<\/p>\n\n\n\n

In other words, while up-to-date security software is vital, it will be of little use if your employees aren’t properly trained to use it and aren\u2019t empowered to make their own judgment calls.<\/p>\n\n\n\n

All too often, staff simply aren’t aware of their central role in maintaining data security and this can only be addressed with training and development opportunities.<\/p>\n\n\n\n

It’s equally important for training to be given regularly, so technological and legislative advances are communicated to members of staff, and to keep awareness levels at their highest.<\/p>\n\n\n\n

Along with more intensive data protection training, it\u2019s advisable that all employees undertake regular awareness training in everyday internet use. It should cover the likes of phishing attacks, setting a secure password, using email and browsing the internet safely, and how to use social media responsibly.<\/p>\n\n\n\n

Finally, if your business accepts card payments, you need to be aware of your responsibilities when it comes to PCI DSS compliance, and make necessary arrangements for your finance staff to be trained up on it.<\/p>\n\n\n\n

As always in matters of compliance and fraud, prevention is better than the cure.<\/p>\n\n\n

\n\t
\n\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t\t

Subscribe to the Sage Advice newsletter<\/h2>\n\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t

Join more than 500,000 UK readers and get the best business admin strategies and tactics, as well as actionable advice to help your company thrive, in your inbox every month.<\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tSubscribe now<\/a>\n\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\"\"\t\t\t<\/div>\n<\/div>\n\n

\n\t
\n\t\t
\n\t\t\t
\n\t\t\t\t

Browse more topics from this article<\/h3>\n\t\t\t<\/div>\n\t\t\t
\n\t\t\t\t