Scams can impact every business, regardless of location, size, or industry. But they are especially a problem for small businesses. Local businesses, start-ups and not-for-profits often don’t have the cyber security support or established accounting processes of larger companies. This can make them more vulnerable to scams.
Fortunately, knowledge is the best protection. If you own or work for a small business, be sure to stay informed about these common scams and report them if your business is targeted. Reports and research is available at BBB.org/ScamTracker.
Common small business scams:
Business Email Compromise (“BEC”). Business email compromise fraud is an email phishing scam that typically targets people who pay bills in businesses, government and non-profit organizations. In Canada, BEC scams are one of the top reported scams recorded by the Canadian Anti-Fraud Centre (CAFC).
In BEC fraud, the scammer poses as a vendor or other trusted source, who sends an email to an accountant or chief financial officer. The email asks them to wire money, buy gift cards or send personal information, often for a plausible reason. If money is sent, it goes into an account controlled by the con artist. Learn more about BEC scams here.
Phony invoices. Businesses receive fake invoices demanding payment for products or services never ordered or received. The most common scams involve office supplies, website or domain hosting services, and directory listings. Often, if you look closely, you’ll see fine print that identifies the bill as a solicitation. Generally, the amount is small enough to not initially raise a red flag. Read more about phony invoice scams.
Directory scams. This scam has plagued businesses for decades. In it, con artists attempt to fool businesses into paying for a listing or ad space in a non-existent directory. In some cases, the directory will technically exist, but won’t actually be distributed to potential customers. Other times, the scammer might lie about being with a legitimate directory, such as the Yellow Pages. Either way, the business is billed hundreds of dollars for listing services they didn’t agree to or for ads that were never placed. Read more about directory scams.
Stolen identity. Scammers often pretend to be a legitimate company in order to trick consumers. Scammers set up fake websites and “hijack” your company name and address. They may also use brand hijacking – the blatant copying and misuse of company logos and website content – to impersonate a business and deceive unsuspecting visitors. In this con, the company doesn’t necessarily lose money. However, their reputation is tarnished when angry customers who were ripped off by scammers think the real company is responsible.
Charity pitches. Most businesses are regularly asked to donate funds to charitable causes. While many requests are legitimate, every year small businesses become victims of fraudulent or deceptive charitable solicitation schemes. Research charities and see more giving tips at Give.org.
Phishing scams. Phishing scams attempt to steal sensitive information about your business. These scams often appear to be legitimate emails or text messages. However, when you click on the link, you download a virus that captures personal information or load a form that asks for bank account or credit card details. Be leery of unsolicited messages and don’t click on links. Instead, hover over the link with your cursor to see the real address. Also, be sure your computer has the proper firewall and computer protection software. Read more about phishing scams.
Office supply scams. Businesses receive an unexpected telephone call from someone claiming to represent a reputable company with which the firm often does business. Sometimes scammers will even call in advance to find out what brand of supplies or equipment the business uses. The scam caller will try to sell the business surplus merchandise at a reduced price, citing a cancellation or over-order by another purchaser. The merchandise doesn’t exist. Don’t be fooled.
Coupon books. Small business operators are often approached to participate in coupon book promotions. The business offers discounts or extras in the coupon books that are sold by promoters to consumers. Problems occur if the promoters change the terms of the coupons, oversell the books, or distribute them outside the company’s normal business area. Make sure the coupon book is being promoted by someone you trust, and that the terms and conditions are clearly spelled out.
Vanity award scams. A vanity award scheme capitalizes on a company’s excitement for an award that essentially holds no value. This con typically targets business owners through email campaigns. The scam email congratulates the owner on their selection for the award and invites them to click a link for further details on how to claim the prize. But of course, claiming the honor involves paying a several hundred dollar fee. Always research the organization offering the “award.” Read more about award scams.
Overpayment scams. In this scam, the person you are doing business with sends you a check for more than the amount they owe you. Then, they instruct you to wire the balance back to them. Or, they send a check and tell you to deposit it, keep part of the amount for your own compensation, and then wire the rest back. The results are the same: the check eventually bounces, and you’re stuck, responsible for the full amount, including what you wired to the scammer. Read more about fake check scams.
Tips to Avoid Small Business Scams
BBB offers these tips to help small businesses protect themselves:
- Keep good records. Keep documentation of all orders and purchases. This will help you to detect bogus accounts and invoices.
- Be extra careful with payment procedures. Establish payment authorization procedures, including a multi-person approval process for transactions above a certain dollar threshold.
- Avoid some payment methods when possible. Wire transfers, pre-paid debit cards and gift cards are scammers’ preferred methods of payment. Always confirm that any request for payment with untraceable methods such as these are verified by an authorized source. Or, try to pay by written cheque, that way, a paper trail has been created.
- Double check vendors. Make sure that the business billing you is a business you’re familiar with and normally do business with. If not, question it. Get the name of the person you speak with, the company name, address, phone and website.
- Be careful what information you share. Do not give out information about your business unless you know what the information will be used for. Never provide personal information or financial details to anyone you don’t know.
- Protect your devices. Make sure you have proper computer protection software and a firewall. Don’t click on links inside unsolicited e-mails. They could spread malicious software or viruses.
- Spread the word. If your employees know about the scam, they’ll be more likely to spot it. Tell your colleagues, too.
What to do if your organization has lost money to a BEC fraud:
- If an organization finds that it has been a victim of a BEC fraud, it needs to immediately call its bank to stop the payment and report it to the Canadian Anti-Fraud Centre in Canada. If a report is filed within 48 hours, there is a chance the money can be recovered.
- Complain to the Canadian Anti-Fraud Centre: 1-888-495-8501.
- Report fraud to BBB Scam Tracker.
Contributions for this report came from Better Business Bureau Wisconsin and Better Business Bureau Saskatchewan.
Karen Smith, CEO
BBB Saskatchewan
