Module 5 · 10:42 video + 10-question quiz · free video
Business Email Compromise and Payment Fraud
The con that moves money without a virus or a link: the four set-ups behind most payment fraud, how criminals get into a real mailbox, why the tell is the request and not the address, the call-back rule on a number you already have, the two-person payment process, and what to do in the first minutes if money has gone.
The scenario
Friday, 15:40 — a supplier's real address says their bank has changed. R386,450 later, the real supplier phones on Monday.
The habit this module drills
The call-back rule.
After this module you can
- ✓Recognise the four set-ups behind most payment fraud.
- ✓Verify any new or changed bank details by calling a number you already have — and hold the payment until you have.
- ✓Keep to the two-person payment process, even when the deadline or the boss says otherwise.
- ✓Report fast — and if money has gone, call the bank within minutes.
What this module evidences: ISO/IEC 27001:2022 clause 7.3 (awareness) and Annex A control A.6.3 (information security awareness, education and training); POPIA Regulation 4(1)(e) (the Information Officer's duty to see that internal awareness sessions are held). The quiz result is recorded against your account, and passing it earns this module’s dated certificate.
Module 5 quiz
Ten “what would you do” scenario questions. Pass mark 80% — retake as often as you like. Pass it and this module’s certificate is issued in your name with the date; it is due again in twelve months. The quizzes and certificates come with a 12-month licence — for one person or for your company.
Loading…