Scams and fraud that target businesses

A lot of the scams and cyber-attacks used to target individuals can be used to target businesses too. These include:

• Phishing scams that trick you out of information that can be used to access your bank accounts or credit cards. 
• Remote access scams that trick you into giving someone access to your device (i.e. smartphone, tablet or computer). This could allow them to access your bank accounts, two factor authentication codes and any data saved on that device. 
• Malware or ransomware, possibly spread by email attachments, via devices, or unintentionally downloaded from the internet.
• A compromised email account which, for a business, can allow scammers to send fake invoices to your existing customers. 

Knowing what scams are currently active can be a good form of defence:

Your staff can be your best defence against scams and fraud. 

Make sure they know what part they play in keeping themselves, the business, and your customers safe. 

The PACT acronym can help you and your staff remember some simple, actionable tips:

P: Pause before sharing information about you or your banking
A: Activate a second layer of security, like two-factor authentication on your devices 
C: Call out suspicious activity 
T: Take care when making payments. 

• Make sure your security processes and policies are up to date, and that they are followed
• Back up your data regularly, capturing all the digital information you need to keep your business running
• Make sure passwords are long, strong and unique
• Use two-factor authentication, where available
• Set your devices, software, operating systems and apps to update automatically

Find more tips for protecting your business on Own Your Online:

If you’re registered for OnlineCode in the ANZ goMoney mobile app and Internet Banking, it adds a second layer of security to verify certain transactions. 

Decide how your employees and your accountant access your ANZ Internet Banking by assigning them a profile in ANZ Direct Online – Administrator, Authoriser or User.

Set your account rules so payments made in goMoney, ANZ Direct Online or Internet Banking require more than one authoriser (signatory). Add new authorisers to your account by calling our Business Specialists.

Read more about the other ways we safeguard your accounts and information:

If you think you’ve been the victim of a scam or fraud, or if you notice anything unusual with your accounts or online banking, call us immediately.

If you have a cyber security issue or have been the target of a scam or fraud not connected to your banking, report it to CERT NZ. Reporting even minor events helps CERT NZ identify risks and improve their guidance.