STOP — Don't Click That Link Yet. Check it out First.!
Even if you know the sender!
Imagine receiving an email asking you to update Adobe to read a message or open a document. It looks genuine and appears to come from someone you know.
Would you click it?
Scammers are becoming increasingly convincing. They can impersonate people and businesses you trust, use familiar logos and wording, and even send messages from compromised email accounts.
One wrong click could expose passwords, compromise your email account, infect your computer or put your business finances at risk.
Here are three common scams to watch out for — and what you can do to protect yourself.
1. “Update Adobe to read this message”
You receive an email asking you to update Adobe, download a file or click a link before you can view a document.
It may look legitimate, but the link could lead to a fake website designed to steal your login details or prompt you to download malicious software.
What should you do?
Don't install software or browser extensions just because an unexpected email tells you to.
If you need an update, open the official application or visit the software provider's website yourself.
Be cautious with unexpected attachments and links, even if the message looks professional.
If you're unsure about a document, contact the sender using a separate, trusted method to confirm they sent it.
2. An email from someone you know
A message arrives from a colleague, customer or supplier. Their name looks familiar, so you assume it's safe.
However, their email account may have been compromised. A scammer could be using it to send malicious links, request information or target the sender's contacts.
Even checking the email address isn't always enough, because criminals may send messages from a genuine compromised account.
What should you do?
Be suspicious of unexpected links, attachments or unusual requests.
Look out for strange wording, unexpected urgency or requests that don't fit the normal conversation.
Contact the sender using a phone number or other contact method you already trust.
Never enter your password or approve a login request just because an email asks you to.
Remember: A familiar name doesn't guarantee a safe email.
3. An email advising that bank details have changed
You receive an invoice from a regular supplier advising that their bank account details have changed. The email and invoice look genuine, so you update the records and transfer the money.
Later, you discover the money went to a scammer.
This is known as business email compromise or payment redirection fraud. Criminals may compromise an email account, impersonate a supplier or alter invoice payment details to divert money into an account they control.
These scams can affect businesses of any size.
What should you do?
Always independently verify changes to supplier bank details.
Call the supplier using a trusted phone number already on file — never rely on contact details supplied in the email requesting the change.
Have a second person independently check significant payments or changes to payment details.
Be especially cautious if you're pressured to make an urgent payment.
If you've already transferred money, contact your bank immediately and ask whether the payment can be stopped or recalled. Notify the genuine supplier as well.
Already clicked? Act quickly.
Don't panic, but don't ignore it. What you should do depends on what happened.
Entered a password? Change it immediately from a trusted device. If you've reused it elsewhere, change those passwords too. Contact your IT support provider.
Downloaded or opened a suspicious file? Stop interacting with it and contact your IT support provider promptly.
Transferred money or shared financial details? Contact your bank immediately.
Think your email account has been compromised? Get help securing it, checking for unauthorised access and investigating suspicious forwarding rules or messages sent from your account.
Acting quickly can help limit further damage. If business systems or customer information may be affected, follow your organisation's incident response procedures and seek professional assistance.
Protect your business
A few simple habits can make a real difference:
Use strong, unique passwords and enable multifactor authentication.
Keep your computer, browser and software updated.
Check unexpected links, attachments and requests before acting.
Independently verify all changes to supplier banking details.
Make sure staff know how to report suspicious emails.
Maintain appropriate backups and security protections for your business.
Where can you get more help?
Not sure whether an email is genuine? Worried about a suspicious link, a computer problem or an unexpected software update? Don’t be afraid to ask for help.
At Connelly’s Office National, we’re here to help local businesses stay connected, work confidently and get the most out of their technology. If something doesn’t look right, contact our team before clicking — it’s always better to check first!
The Australian Government provides free information to help individuals and businesses recognise scams, protect their information and respond to incidents.
Scamwatch provides advice about email scams, business email compromise and payment redirection fraud. You can learn how to recognise scams and report them.
The Australian Cyber Security Centre's Cyber Action Year 2026 encourages Australian organisations to take practical steps to strengthen their cybersecurity and resilience.
Stop. Check. Verify.
Before clicking a link, downloading a file or transferring money, take a moment to check that the request is genuine.
If something doesn't feel right, don't ignore your instincts. Verify it using a trusted method and ask for help when you need it.
Connellys Office National
Local Know How.
Comments