Protecting us from cyber fraud goes beyond just security awareness training, but training is a crucial part of the solution, and repetition is key. How else can we effectively defend against the cyber threats that are responsible for 70-90% of all successful data breaches, especially after bypassing every technical cybersecurity defense?
At some point, a scam will reach a user, and that user will be the last to evaluate its legitimacy. The decision they make could have a big impact on their future, and potentially that of their employer. Training people to recognize and avoid scams is tough, especially in today’s world where AI-powered deepfakes make it easier for attackers to target anyone.
Here’s a quick 20-second anti-scam lesson:
If a message comes out of nowhere and asks you to do something you’ve never done before (at least for that person), research it using another trusted method before taking action.
Messages with the two warning signs below are much more likely to be social engineering scams than others. While not every scam fits these criteria, 99% of them do.
The key warning signs:
Unexpected message: Whether it’s an email, text, WhatsApp, social media, work chat, phone call, or even in person, if the message comes out of the blue, it’s already risky.
Unusual request: The message asks you to do something you’ve never done before. Often, it’s presented with urgency: “Do this now, or you’ll face serious consequences!”—usually financial harm to you or your company.
These types of requests often claim you’ll lose money you don’t owe, miss out on earnings, or even forfeit an easy cash payout.
If a message comes out of nowhere and asks you to do something you’ve never done before, take a moment to research it better before taking action.
Avoid using any contact info from the message. Scammers are sneaky and often send out fake email addresses, suspicious links, and phone numbers that lead to fake call centers. The best way to reach out is to try contacting the suspected sender using a known, good phone number, visiting their official website, or looking up their legitimate phone number on their website. Be cautious of phone number lookups in internet search engines – many malicious numbers end up being listed as legit because the scammer has sent out so many fake numbers that they “poison” the search engine.
If you’re still unsure, don’t hesitate to reach out to us. You can email us at support@consultantalliance.com. We’re here to help!
