10/11/2017

Eight Tips for Avoiding Business Email Compromise (BEC) Scams

Citizens Bank marks Cyber Security Awareness Month with some tips for handling email     

PROVIDENCE, R.I. – Citizens Bank is marking Cyber Security Awareness Month this October by offering eight tips for handling email.

“Handling email can be a challenge as our inboxes have become inundated and we have less time to manage the information flow,” said Michael Cummins, head of Treasury Solutions at Citizens Bank. “Hackers keep coming up with new ways to attack systems so it is important for business executives to remain vigilant and not make it easy for them to gain access.” 

In many cases, with business owners focused primarily on day-to-day operations, cyber security is only a focal point when there is a problem. But business owners who establish proactive cyber security strategies are better able to avoid those problems and ensure that their companies are less vulnerable to attack. 

Consider the following tips for handling email:

  • Treat email with caution – email is a gateway into your computer and personal information, so make sure you only open emails/attachments from known senders and, in general, be wary of emails with attachments and links.
  • Check for spoofed (i.e. false and deceptive) domain names – this can help you identify if someone might be launching a Business Email Compromise (BEC) scam against your company.
  • Limit publicly available information – criminals use public information to target companies for BEC scams.
  • Implement a formal process for money transfers and documentation requests - ensure there is a formal process for high-risk transactions such as wire transfers and requests for sensitive documentation.
  • Require dual approval for high-risk transactions -- segregation of duties and including more than one individual in a transaction is a great way to help mitigate external and internal fraud.
  • Use Forward instead of Reply – when receiving an email requesting a money transfer or for sensitive information, using forward and sending it back to the intended recipient can help you avoid falling victim to a BEC scam that utilizes a spoofed domain.
  • Use Out of Band to Verify – use a different channel to verify. If the request came in via email, use phone and vice versa.
  • Don’t get complacent – fraud is ever-changing, keep up to date with the latest fraud trends by visiting citizensbank.com/security and other online sources such as staysafeonline.org.

“The most important tip may be the last one – don’t get complacent,” said Cummins.  “These tips can help reduce the risk that you will be vulnerable to Business Email Compromise scams, but you and everyone on your team needs to be on the alert if we are going to mitigate that risk.” 

Citizens is a trusted strategic and financial advisor, consistently delivering clear and objective advice. The Citizens Commercial Banking approach puts clients first by offering great ideas combined with thorough market knowledge and excellent execution to help our clients enhance their business and reach their potential. 

For more information, please go to the Citizens Commercial Banking website. 

About Citizens Financial Group, Inc.

Citizens Financial Group, Inc. is one of the nation’s oldest and largest financial institutions, with $151.4 billion in assets as of June 30, 2017. Headquartered in Providence, Rhode Island, Citizens offers a broad range of retail and commercial banking products and services to individuals, small businesses, middle-market companies, large corporations and institutions. Citizens helps its customers reach their potential by listening to them and by understanding their needs in order to offer tailored advice, ideas and solutions.  In Consumer Banking, Citizens provides an integrated experience that includes mobile and online banking, a 24/7 customer contact center and the convenience of approximately 3,200 ATMs and approximately 1,200 branches in 11 states in the New England, Mid-Atlantic and Midwest regions. Consumer Banking products and services include a full range of banking, lending, savings, wealth management and small business offerings. In Commercial Banking, Citizens offers corporate, institutional and not-for-profit clients a full range of wholesale banking products and services, including lending and deposits, capital markets, treasury services, foreign exchange and interest rate products and asset finance. More information is available at www.citizensbank.com or visit us on Twitter, LinkedIn or Facebook.