In this video (in French), Jean-François LeBlanc explains why business email is one of fraudsters' favourite entry points, and how an SMB can protect it.
Why is email so targeted?
Email is everywhere: invoices, contracts, conversations with clients and suppliers. It reaches employees directly and makes it easy to impersonate someone trusted. According to Statistics Canada, scams, fraud and identity theft are among the most frequent methods in incidents affecting Canadian businesses.
Two techniques to recognize
Phishing: a message urging you to click a link, open an attachment or enter credentials on a fake page.
Impersonation: a message that seems to come from the CEO, a supplier or a client, requesting an urgent payment or a change of banking details.
Essential measures
- Multi-factor authentication on every mailbox.
- Domain email authentication (SPF, DKIM, DMARC) configured by your provider.
- Filtering of malicious emails.
- A verification rule: any change of banking details is confirmed by phone, at a known number.
- Training employees to recognize warning signs.
To check how well your email is protected, start with the Cyber & AI Assessment, or train your teams through our training.