Most cyber incidents we see in small businesses start with a single email. The good news: a few habits stop the majority of them.
The 10-second checklist
- Check the sender’s actual address, not just the display name.
- Hover over links before clicking — does the domain match who it claims to be from?
- Be suspicious of urgency: “overdue invoice”, “account suspended”, “CEO needs gift cards”.
- Never enter your Microsoft 365 password from a link in an email.
- Verify payment or bank-detail changes by phone, using a number you already have.
Layer up your defences
People are one layer. Email filtering, multi-factor authentication and endpoint protection are the others — together they make a successful attack far less likely.
Clicked something you shouldn’t have? Don’t panic and don’t hide it. Call us straight away: the faster we know, the smaller the clean-up.