Prevention
Verify every payment change
Two checks that stop payment redirection fraud before the money leaves, and what to do if it already has.
- Home
- Guides
Guides
Practical security guidance for small practices, nonprofits and small businesses, drawn from government and vendor guidance, with an accountant's view of how the loss shows up in the books. Free to print, use and share.
All guides
Response
After a business email compromise: the first 72 hours
Lock the account without destroying evidence, save the logs before they expire, and line the inbox up with the ledger to measure the loss.
Guides on this site are published under the Creative Commons Attribution 4.0 license. Share them with your staff, your clients or your professional association; just credit the source. They're general guidance, not legal advice.