The South Australian Business Chamber Today

Payroll scams ... your HR, payroll or finance staff are most at risk.

Monday, October 24th 2022

By the South Australian Business Chamber corporate members at the Commonwealth Bank

Business email compromise scams target businesses of all sizes. They involve emails from a compromised email address, or emails made to look like they are from someone you know, such as your:

  • boss
  • supplier
  • customer
  • lawyer.

These scams involve emails sent to you or your business with a request to make payment to a new account. This new account may be under the scammer’s control, and your money could be lost. If you get an email with a request to pay a new account, or an invoice with different account details to those usually used — pause, review, reflect. Think about calling the sender of the email before paying.

One variation that is prevalent is payroll scams. In these kinds of scams, cyber criminals impersonate employees in an attempt to trick staff into redirecting funds to the scammer. Staff working in HR, payroll or finance are most at risk.

  • The emails they receive might look official or even appear to come from a legitimate employee email address.
  • They might ask for an urgent update of bank account details to a scammer account instead.
  • In other cases, the first email will seem harmless, simply asking what the process for updating payment details is. The idea is to later make contact with a more targeted follow-up.
  • Educating staff on how to spot these fraudulent emails will mean your business is not compromised and money is not lost. Here is how to keep your business safe, as recommended by the Australian Cyber Security Centre.

    1. If an email appears suspicious, do not reply or click on any links. Instead, look up the person’s email address and create a new email to verify the request being made. If your company’s database lists phone numbers, give them a call to quickly check the email’s validity
    2. Always set a strong, unique, two-factor authentication password with your email. If you receive a notification about a bank account update you didn’t authorise, contact payroll immediately
    3. Frequently check your bank accounts for any unusual activity.

    Keeping reading >

      Author
      Recent Articles
      City of adelaide Website Header
      18 June 2026
      Make it your business – Enrol to vote
      Electricity Website Header
      18 June 2026
      Power price relief for small business starts with checking your deal
      Knife Website Header
      18 June 2026
      Selling knives in SA? New rules begin 1 July 2026
      Jobedge Website Header
      18 June 2026
      Why Australia's workforce challenge requires a new approach
      Programs Website Header
      18 June 2026
      Which business program is right for you?
      SABC Tindo 47
      18 June 2026
      Photo Gallery: The Chamber Networking - June 2026 @ Tindo Solar