Worried about losing money when buying overseas? Scammers use clever email tricks, targeting your payments, especially to Chinese suppliers. You need to know how to spot them.
Email scams often involve hackers impersonating suppliers or intercepting messages. They send fake invoices or bank change notices to trick you into sending money to their accounts. Always verify changes directly by phone.
These scams are sneaky and sadly becoming more common in international trade. I’ve seen firsthand how devastating they can be. Understanding exactly how these scammers operate is the first step to keeping your hard-earned money safe when you pay your suppliers. Let’s break down their common methods and, more importantly, how you can protect yourself.
What Are the Common Ways Scammers Use Emails to Steal Your Payments?
Ever received an urgent email asking for payment to a new bank account? Scammers rely on creating panic and exploiting trust. Learn their common tactics so you can spot the danger signs immediately.
Common email scams include Business Email Compromise (BEC), where hackers fake supplier emails, and phishing attacks to steal logins. They often send fake invoices or urgent bank account change requests.
Scammers have several ways to trick you using email. It’s important to understand these methods. They often target businesses involved in international trade because large sums of money are moving, and communication relies heavily on email.
Business Email Compromise (BEC)
This is perhaps the most dangerous type. Scammers might hack into your supplier’s email account or create a very similar-looking email address (maybe just one letter is different!). They monitor conversations. Then, when a payment is due, they jump in. They might send an email that looks exactly like it’s from your supplier, saying, “Please use our new bank account for this payment.” It looks legitimate, using the same tone and maybe even previous email threads. I remember a client who almost lost $70,00 this way; luckily, they called us first.
Phishing Attacks
Phishing emails try to trick you into giving away sensitive information. This could be your email login details, passwords, or company financial data. The email might look like it’s from a trusted source, like a bank or even a shipping company. It might ask you to click a link to “verify your account” or “update your details.” Clicking that link takes you to a fake website designed to steal whatever you type in. If scammers get your email login, they can monitor your communications and launch a BEC attack later.
Malware Infections
Sometimes, scammers send emails with attachments or links that install malicious software (malware) on your computer if you click them. This malware might record your keystrokes (a keylogger), steal saved passwords, or give the scammer remote access to your system. With this access, they can gather information about your suppliers, payment schedules, and internal processes to make their future scams more believable.
Here’s a quick look at red flags:
| Tactic | Red Flags |
|---|---|
| BEC | Unexpected change in bank details; slight changes in email address; unusual urgency; poor grammar/spelling (sometimes); requests for secrecy. |
| Phishing | Requests for login details/passwords; urgent calls to action; generic greetings (“Dear Customer”); suspicious links or attachments. |
| Malware | Unsolicited attachments (especially .zip, .exe); requests to enable macros; warnings from security software. |
Being aware of these specific tactics helps you stay alert.
How Can You Effectively Protect Your Business from These Email Payment Scams?
Feeling uneasy about online fraud when paying suppliers overseas? Simple checks can stop scammers. Put these precautions in place now to secure your international payments and avoid costly mistakes.
Protect your business by always verifying bank account changes via phone or video call using a known contact number. Also, use strong passwords, enable two-factor authentication, and train your team.
Protecting your business from these scams involves a mix of vigilance, clear procedures, and technical safeguards. No single method is foolproof, so using multiple layers of security is best. Based on my experience working with many international buyers, here are the most effective strategies:
Strict Verification Protocols
This is the most critical step, especially regarding payments.
- Mandatory Verbal Confirmation: Create a company policy that any request to change supplier bank details must be confirmed verbally. Use a phone number you already know is correct (from your records, not from the suspicious email). A video call can add an extra layer of security.
- Internal Checks: Have a clear internal process for approving payments. Maybe require two different people to sign off on payments over a certain amount, especially if bank details have supposedly changed.
- Cross-Reference Information: Check the bank details against previous invoices or contracts if possible. Any discrepancy is a huge red flag.
Technical Security Measures
Technology can help filter out threats and protect your accounts.
- Strong Passwords & 2FA: Use complex, unique passwords for your email and financial accounts. Enable two-factor authentication (2FA) wherever possible. 2FA adds a vital second step to logging in, usually involving a code sent to your phone.
- Email Filtering: Use robust spam and phishing filters on your email system. Keep security software (antivirus, anti-malware) up-to-date on all company devices.
- Secure Network: Ensure your company Wi-Fi is secure. Avoid using public Wi-Fi for sensitive business communications or transactions.
Staff Awareness and Training
Your employees are your first line of defense.
- Regular Training: Educate your team, especially those in finance and procurement, about common scam tactics like BEC and phishing. Show them real examples of scam emails.
- Encourage Caution: Foster a culture where it’s okay to question things. Staff should feel comfortable raising concerns about suspicious emails or requests, even if they seem urgent or come from a senior person (whose email might be compromised). Teach them never to click suspicious links or open unexpected attachments.
Implementing these steps consistently makes it much harder for scammers to succeed.
Why is Calling Your Supplier Absolutely Crucial When You See a Bank Account Change Email?
Received an email saying your supplier changed their bank details? Acting too quickly based only on that email could be a disaster. This simple phone call check is your strongest defense.
Calling your supplier using a trusted phone number confirms if the bank change is real. Email communications can be easily faked by scammers; a direct conversation gives you certainty before sending money.
Let me emphasize this point because it’s the single most effective way to stop payment diversion fraud: always call your supplier to verify bank account changes. Email alone is simply not secure enough for this kind of sensitive information.
Why Email Isn’t Enough
Scammers are incredibly good at making emails look real. They can perfectly copy logos, signatures, and writing styles. They might hack the supplier’s actual account (BEC) or create an email address that’s almost identical (typosquatting). If you just reply to the email to confirm, you might be talking directly to the scammer, who will, of course, say “Yes, the new account is correct!” Relying solely on email is like leaving your front door wide open.
The Power of a Phone Call
A phone call breaks the scammer’s control over the communication channel.
- Use a Trusted Number: Critically, you must use a phone number that you know belongs to your supplier – one you got from their official website, your contract, or previous verified communications. Do not use a phone number listed in the suspicious email itself, as that could also be fake.
- Direct Confirmation: Speak directly to your known contact person at the supplier company. Ask them clearly: “We received an email requesting payment to a new bank account. Can you confirm if your bank details have changed and, if so, provide the new details verbally?”
- Listen Carefully: Pay attention to their response. Does it sound like your usual contact? Are they confirming the change confidently?
Building Trust Through Caution
Some clients worry about seeming untrusting by calling to double-check. Let me reassure you: any legitimate, responsible supplier will appreciate your diligence. They understand the risks of fraud too, and they want the payment to arrive safely just as much as you do. In my experience, taking this step actually strengthens the relationship. It shows you are careful and professional. We always tell our clients, “If you get an email about bank changes, please pause. Pick up the phone and call us. We want you to verify.” It protects both sides. This simple phone call is your safety net.
Conclusion
Email scams targeting payments are a real threat in international trade. Always verify payment detail changes, especially bank accounts, by calling your supplier directly using a trusted number. Stay safe.
