New Paragraph

Watching Out for Small Business Scams

Mar 08, 2021


Our clients tell us one of the most powerful benefits of formally meeting regularly with a group of other business owners is getting insights from experts in fields outside of their own. For over 15 years, peer group member Fred Moore, President of Moore Computing, has been helping his peers tackle complicated IT challenges like data management, server monitoring, and cloud computing.


Today, Fred tells us the number one IT challenge for his team and their clients is protection from cyberattacks. Cybercriminals are commonly known for hacking into a business’s IT system, encrypting the data, and demanding a ransom to unencrypt it. We’ve all seen the headlines about breeches into large corporations and even government systems. However, the Moore Computing team is seeing more small and medium-sized businesses targeted with a variety of scams beyond data encryption.


The past year has been impactful on the country’s tens of millions of small businesses, to say the least. When the government established the Paycheck Protection Program and small business owners have access to funding, bad actors stepped in to find ways to take that money away in the form of small business scams.


Scammers are taking advantage of so much confusion surrounding the PPP and other government loans by saying they can help business owners get their money faster and easier, and many owners will accept their offer. They will give scammers important and sensitive data, like bank accounts and tax ID information. 


Small business scams aren’t a newly emerging risk. The Better Business Bureau reported that almost two-thirds of small business respondents said they were a victim of at least one scam, with nearly 20% saying they lost money or business data due to the scam. The pandemic, like natural disasters, can bring fraudsters out of the shadows as businesses work to rebuild.



Several Ways That Scammers Can Cheat 


Imposters


A common scam includes someone calling your business claiming to be from a government agency or utility company. They will say that your bills are overdue or you need to pay a business license fee, and some will ask you to pay using gift cards that can’t be traced when spent. 


Fake invoices


Scammers will find out which vendors you regularly do business with, and submit invoices under their names in the hope that whoever is handling the payments won’t double-check for legitimacy.


Phishing emails


Cybercriminals will pose as a vendor or colleague and send emails to whoever is in charge of the accounting. These emails will demand urgent, overdue payments and include a link that will facilitate the transaction. 


These are just a few of the most common ways that businesses can be defrauded. Scammers can offer to fix your online reputation, sell you ads in business directories, offer to invest in your business in exchange for an upfront fee — the list goes on and on.

How Small Businesses Can Protect Against Scammers


  • Invest in training for every employee, from top to bottom. Tell them to never click a link from a sender they don’t know and use training tools like KnowBe4 to support these learning initiatives. 
  • Get covered by cyber insurance; this is likely an additional policy on top of the general liability coverage you already have for your business. Unless you have a very robust general liability policy, you won’t have cyber coverage.
  • Limit the number of employees that have access to funds and accounts. Additionally, establish clear rules and guidelines for handling things like ordering supplies or paying invoices, and consider requiring approval for each purchase.
  • Research vendors and partners before exchanging any money. Search for the company name online, investigate their website, and check for any scam alerts. Take it one step further and check the Better Business Bureau for a profile.
  • Verify all invoices before payment, and reconcile them with items that have been ordered, work that’s been completed, and services rendered. Make sure that everything is correct before sending money. 
  • Don’t respond to emails that ask for sensitive data, and don’t click on any links from senders you don’t recognize. The same goes for phone calls — don’t give out information to callers that you can’t verify.
  • Make sure your business computers and devices are protected against viruses and malware. Secure or even encrypt files and software that connect to the internet and contain business and customer data.
  • Outsource your IT to a trusted company that stays up to date on cyber protection best practices. In-house IT, even with a professional will not have the latest industry knowledge that a professional firm will.


Make sure your business is protected before it’s too late and you’ve been exploited, or worse, forced to close your doors because of a scam. To be fully sure that your business is protected against cyber scams, reach out to IT professionals for help on actionable guidance.


If you aren’t benefitting from the wisdom of your business owner peers, contact us to learn more about our facilitated monthly peer group meetings.

08 Mar, 2024
Have you been having trouble sending out bulk emails and email blasts recently? Are you suddenly having deliverability issues with clients and vendors you've been emailing for years? If so, you're not alone — Google and Yahoo rolled out new DMARC requirements in February, creating headaches. We have heard that many of our small business owner clients and their IT departments are having such headaches.  To investigate this issue, we have leaned on IT expert and long-time TAG peer board member Fred Moore of Moore Computing. Fred has walked us through changes to DMARC and offers advice on how small business owners can get their emails back into the inbox. While DMARC changes have thrown many into a temporary tailspin, the changes represent a move to safer and more secure email communication for all parties. Let's discuss what small business owners need to know about DMARC, how they can ensure their emails reach customers' inboxes, and how to keep their business digitally secure. What is DMARC? Cybersecurity measures are similar to cars: most of us drive one daily, but most are unable to lift the hood and understand exactly how it runs. Most of us rely on cybersecurity measures to keep our businesses safe online, but we may need help understanding the technical elements that keep us safe. That said, all small business owners should have a general background in cybersecurity, and DMARC is a great place to start. DMARC stands for "Domain-based Message Authentication, Reporting & Conformance." The idea behind DMARC is to limit the volume of scams and phishing on the internet. DMARC works with SPF and DKIM. SPF (Sender Policy Framework) is a list of services and servers that are authorized to send emails on behalf of your domain, and DKIM (DomainKeys Identified Mail) is a digital seal that verifies the content of your email hasn't been altered or tampered with. DKIM is also able to withstand email forwarding, whereas SPF can not. Senders and Recipients At its core, DMARC validates the authentication of the sender of an email message. When there are deliverability issues with a message, it usually falls back on the sender. Small business owners know the importance of getting marketing campaign emails and other communications into their customers/clients' inboxes; to accomplish this, it is crucial to follow all protocols to ensure you have the best chances to reach customers' inboxes at an optimal place (i.e., not the spam folder), and avoid spam complaints. How does your email make its way to recipients? It follows a basic flow: ● The email is composed and sent ● The sending mail server will add DKIM ● The email is sent to the recipient's server ● Validation tests begin, checking DKIM, SPF, and DMARC policies ● The email either passes, is quarantined, or is blocked/deleted ● If the email passes, it goes through the recipient's user filters and inbox rules
11 Jan, 2024
Running a small business is a challenging task. It requires dedication, hard work, and juggling multiple responsibilities. Often, small business owners try to cut costs by taking on tasks themselves, even if they are better off calling a professional. While the intention may be to save money, the reality is that DIY can lead to costly mistakes and legal pitfalls. Let's explore the common mistakes small business owners make when they opt for a do-it-yourself approach and why investing in professionals like lawyers, accountants, and general contractors is crucial for long-term success. The Myth of Saving Money Many small business owners believe that handling tasks themselves will save them money in the long run. However, this is often a misconception. While it may seem cost-effective initially, the lack of expertise and knowledge in critical areas can lead to costly mistakes that can ultimately hinder the growth and profitability of a business. The Value of Professional Services Professional services, such as lawyers, accountants, advisors, and general contractors, bring expertise, experience, and a deep understanding of industry regulations. They can provide valuable guidance, prevent legal issues, and help small business owners make informed decisions that align with their long-term goals. Most of the time, business owners don't consult with their advisors because they are wary of spending money on bills from their advisors on top of other expenses. The phrase "You can pay me now, or really pay me later" comes into play in these situations. Business owners should not be afraid to discuss money and bills from professionals with their advisors, and they should properly compensate advisors for their time. Complaining about spending a few thousand dollars to review a $20,000,000 contract can cost hundreds of thousands due to difficult payment and dispute resolution terms.  Protecting Your Intellectual Property Intellectual property (IP) is a valuable asset for any business. Failing to protect it can lead to brand confusion, loss of revenue, and legal battles. Trademarks, copyrights, and patents should be filed appropriately and protected to ensure exclusive rights to your brand name, logo, or product design. How Professionals Can Help Lawyers specializing in intellectual property can guide small business owners through filing the necessary documents and paying the required fees. They can conduct an IP audit to identify and protect essential assets, develop IP protection strategies, and enforce IP rights if violations occur.
09 Oct, 2023
In the 1999 film “Any Given Sunday,” directed by Oliver Stone, Al Pacino delivers a powerful and memorable locker room speech that has resonated with me for years. The speech, delivered by Pacino’s character, Tony D’Amato, before a crucial football game, encapsulates the essence of the film and the themes it explores. While the speech is specifically about football, its underlying message can be applied to various aspects of life, including business. The idea of fighting for inches, continuously improving, and eliminating mistakes is a powerful metaphor for the importance of perseverance and adaptability in business. It highlights the value of small victories, incremental progress, and the relentless pursuit of excellence. For business owners, the speech serves as a reminder to focus on the details and the small wins that can accumulate over time. Just as a football team must fight for every inch on the field, a successful business must be diligent in managing its resources and seize every opportunity for growth. It emphasizes the importance of building a team that shares the same values and is committed to continuous improvement. Think of it in terms of all the inches and seconds around us in business and how $200 here and $50 there adds up. The whole concept of continuous improvement, eliminating mistakes, and fighting to get better is what I believe Oliver Stone intended when he wrote it. I love it as much today and as when I first saw it and the metaphor of getting into business and being profitable. You can read the transcript here . Or watch it here:
More Posts
Share by: