Train Your Staff 
Your best defense is an informed staff. Train employees not to send passwords or sensitive information by email, even if the email seems to come from a manager. Explain to your staf how scams happen and encourage them to talk with their coworkers if they suspect a scam.

Verify Invoices and Payments 
Make sure procedures are clear for approving purchases and invoices and ask your staff to check all invoices closely. Pay attention to how someone asks you to pay and tell your staff to do the same. If someone demands that you pay with a wire transfer, cryptocurrency, or gift cards, don’t pay. It’s a scam.

Spot Tech-Related Scams
Since scammers often fake their phone numbers, don’t trust caller ID. If you get an unexpected text message or email, don’t click any links, open attachments, or download fles. That’s how scammers load malware onto your network or try to convince you to send money or share sensitive information. Scammers sometimes even hack into the social media accounts of people you know, sending messages that seem real — but aren’t. 

Learn more about protecting your small business or non-proft organization from cyber scammers and hackers: check out Cybersecurity for Small Business at ftc.gov/cybersecurity.

Know Who You’re Dealing With
Before doing business with a new company, search the company’s name online with the term “scam” or “complaint.” Read what others are saying about that company. Ask people you trust for recommendations. You also may be able to get free business development advice and counseling through programs like SCORE.org.

*For more advice on protecting your organization from scams, visit ftc.gov/SmallBusiness.

**If you spot a scam, report it to ReportFraud.ftc.gov. Your report can help stop the scam. Alert your state Attorney General. You can find contact information at NAAG.org.