Your everyday field guide.

Pause before money or access moves.

Verify changed banking details, unusual payments, payroll changes, and unexpected support requests through a contact you already trust.

“We verify changes through our usual process. I’ll contact you using the details we already have.”

A familiar name, the correct amount, a polished message, or a convincing voice doesn’t replace the check.

Make the next safe step easier.

• Protect business email with the strongest practical MFA or phishing-resistant sign-in supported.
• Use unique passwords and a protected password manager.
• Limit access and keep devices updated.
• Keep protected backups and test a restoration.
• Choose a reporting contact and a backup contact.

Report quickly. Use trusted routes.

Suspicious message or link: stop interacting and report what happened. Keep the original message available.

Password entered: from a trusted device, use the genuine service to change it. Involve your IT contact to end sessions and check account changes. Change reused passwords too.

Unexpected software or ransomware: isolate the device from Wi-Fi and wired networks. Contact your responder from another device and follow your incident plan. Leave it powered on unless your responder or procedure directs otherwise.

Money sent: call the bank or payment provider’s fraud team immediately through a trusted number. Preserve the payment details. Report suspected fraud to local police and the Canadian Anti-Fraud Centre.

Make checking welcome.

“Thanks for telling me quickly. What happened, and when?”

Support staff who pause to check, including when a request appears to come from the owner. Give the first few improvements an owner and a date.

This guide accompanies the supplied talk. Follow your organization’s incident procedure and use qualified support for a real incident.