It’s a sad reality, but being scammed happens frequently. In fact, in 2019 Australian small businesses lost $1.4 million to scams across more than 2021 incidents according to the ACCC.

It happens to the best of us, even government officials and cybersecurity professionals have fallen victim, so please know…

You’re not stupid and you shouldn’t feel embarrassed 💪

Cyber-criminal organisations are multi-million dollar businesses employing researchers, professional marketing departments, web designers and even call centres whose job it is to scam people 🤯

To help small businesses reduce this type of crime, it’s imperative that all we report scams to the right places. Just as you would report something suspicious to Crime Stoppers so they can notify other districts and relevant bodies, the same applies to cybercrime.

The quicker something is reported, the faster:

• 💸Banks can try to get your money back;

• 🙅‍♂️‘Takedown’ companies (eg. FraudWatch) can get the site removed and ensure no one else is scammed;

• 👩‍🎓Other small businesses can learn about a scam and protect themselves.

Let’s stand together against online scammers.

Many larger corporates and their customers have mechanisms for reporting fake emails, but we know it can be confusing to know where small businesses can do the same. Here is a quick overview to simplify things for small businesses:

If you receive a phone call from someone suspicious

1. Block the caller on your phone

2. Let others in your team know to block that number.

If your company has been a victim of a scam and money is involved

(e.g. purchased goods or you shared banking details)

1. Contact your bank, so they can try and recover the funds for you

2. Report it to the police who will ask you to provide details on what happened, when and how (remember, their job is to help stop criminals, even online criminals)

3. Contact / notify your Insurance Company

4. Report it to https://www.cyber.gov.au/report

Depending on the type of scam - you may want to contact your IT Support team to help check for malware or IDCare who can help you work through customer impacts.

If you’ve been a victim of identity theft or had confidential information stolen

1. Contact IDCare to help recover your identity and to remove malware

2. Report it to the police

3. Contact / notify your Insurance company (they can assist in the investigation of the incident)

4. Report it to Scamwatch, part of the ACCC.

Once you have reported your scam to the appropriate bodies and when you are ready, it might be a good time to review our protecting your business from online scams tips. You can also find more information in our Cyber Fitness Program.

At Cynch, it is our belief that if we build an ecosystem where small businesses help each other by reporting quickly, then we can be stronger together.

We notify our cyber fitness members of emerging scam typess and other threats that are relevant to small businesses as we hear of them. 

If you’d like to receive notifications of new scams we see, please sign up for a free Cynch Cyber Fitness membership.