These days nearly half of cyber crimes are targeted at smaller organisations. However, there are some simple steps you can take to protect your business. A growing threat is invoice scams. This is when a criminal changes the bank account details on an invoice. Learn how to recognise an invoice scam so you can protect your business. Colin is a project manager for a small construction company and has a mountain of invoices to pay. He notices a regular supplier has sent an invoice earlier than usual. As a precaution, he checks their payment details against last month's records and notices the bank account details have changed. He calls Mary from the supplier's accounts department to verify the change. Colin's attention to detail has been worthwhile. Mary says they haven't changed their payment details. In fact, they have received a few calls asking the same question. Mary discovered earlier that week, a staff member had fallen for a Phishing email and entered their username and password into a fake website. The criminals used these credentials to access the employee's email account then sent out fake invoices with new payment details. There are some simple ways to spot invoice scams – when you receive an invoice, check if the payment details have changed. If they have, call the supplier on a known phone number to confirm the change or you can use a publicly listed phone number. Don't rely on the contact details on the invoice. Use two-factor authentication on email and banking accounts. You can also share examples of suspicious messages in your business so others know what to watch out for. And if using NAB Connect, consider having two people approve payments to new accounts or larger payments. To help make your business a hard target for criminals visit nab.com.au/security for more information.