--- title: Watch out for this common online fraud tactic to better protect your business description: Banking information change requests is a common online fraud tactic. Here's how to better protect yourself, your business and your employees: image: https://blog.payworks.ca/hubfs/BlogPost_CyberSecurity_June7-1.jpg --- [Skip to main content](https://blog.payworks.ca/watch-out-for-this-common-online-fraud-tactic-to-better-protect-your-business#maincontent) [Skip to footer](https://blog.payworks.ca/watch-out-for-this-common-online-fraud-tactic-to-better-protect-your-business#footer-en) ![Text reads, “Connect with employees directly: a defense against online fraud tactics”. ](https://blog.payworks.ca/hubfs/BlogBanner_June7-1.jpg) # Watch out for this common online fraud tactic to better protect your business Jun 07, 2022 [Resources](https://blog.payworks.ca/tag/resources) ![Stefan DeCosse](https://blog.payworks.ca/hubfs/StefanDeCosse_Approved_Square.jpg) Stefan DeCosse Vice President Information Security Stefan joined Payworks in 2015 as a key member of the security team and has been instrumental in evolving our security practice, including the establishment of our Security Operations Centre from the ground up. Vice-président, Sécurité de l’information Stefan a joint les rangs de Payworks en 2015 à titre de membre important de l’équipe responsable de la sécurité et joue un rôle clé dans l’élaboration des pratiques de sécurité, dont la création d’un centre d’opérations de la sécurité à partir de zéro. Share this article [![Share this on Facebook.](https://blog.payworks.ca/hubfs/Payworks%20February%202019/Images/button.gif)](https://www.facebook.com/sharer/sharer.php?u=https://blog.payworks.ca/watch-out-for-this-common-online-fraud-tactic-to-better-protect-your-business) [![Share this on Twitter.](https://blog.payworks.ca/hubfs/Payworks%20February%202019/Images/button.gif)](http://twitter.com/share?text=A%20great%20article%20from%20Payworks!&url=https://blog.payworks.ca/watch-out-for-this-common-online-fraud-tactic-to-better-protect-your-business) [![Share this on LinkedIn.](https://blog.payworks.ca/hubfs/Payworks%20February%202019/Images/button.gif)](https://www.linkedin.com/shareArticle?mini=true&url=https://blog.payworks.ca/watch-out-for-this-common-online-fraud-tactic-to-better-protect-your-business&title=&summary=&source) According to [a joint survey](https://www.cfib-fcei.ca/en/media/news-releases/majority-small-businesses-want-improve-their-cybersecurity-within-next-year) from the Canadian Federation for Independent Business (CFIB) and Mastercard, 72% of small business owners are more concerned than ever about cyberattacks on their business. Today’s reality is that ALL companies – regardless of size or industry – should be aware of how a cyberattack could affect their business. One of the best defences against [social engineering](https://blog.payworks.ca/six-ways-to-engage-your-employees-in-social-engineering-defense?hsLang=en-ca) tactics is awareness – for employees at your business to be familiar with what these fraudulent communications look like and what steps to take in evaluating whether or not a message is legitimate. In the wake of the COVID-19 pandemic, digital communications are relied on more than ever to stay connected with staff and colleagues and conduct day-to-day operations. Some organizations have also shifted to permanent remote or hybrid work models, increasing the need for this form of connection. Cyber-criminals may look to exploit these situations, and the tactics used are growing to be more sophisticated; the fraudulent communications or requests often appear completely valid. If successful, these cyberattacks can result in financial losses for your business. Here’s one (of many, unfortunately) social engineering scams Canadian businesses should know about to protect themselves: ## Banking information change requests: a common online fraud tactic An employee requesting a change to their banking information might seem like a typical business-related communication to receive. However, cyber-criminals can masquerade as an employee in requesting changes to transit and account numbers. If your business completes this (fraudulent) request, the employee’s pay would instead be deposited into the criminal’s bank account. Wondering how to prevent this from happening to your business? Making yourself and your employees aware of [social engineering red flags](https://blog.payworks.ca/six-ways-to-engage-your-employees-in-social-engineering-defense?hsLang=en-ca) is a great first step; encouraging staff to be vigilant and providing a simple way for them to report a suspected social engineering attempt or suspicious communication is another. If you or your staff receive a suspicious communication, one of the most actionable ways to be vigilant is to double check… ## How to better protect yourself, your business and your employees If you or an employee receive a [“phishy”](https://blog.payworks.ca/remote-workers-should-be-aware-of-phishing-scams?hsLang=en-ca) communication, **always confirm** the identity of the person making the request. This can be done in a number of ways: - Speak to the employee or sender in person - Phone the employee or the sender (telephone or video chat) - Open up a fresh email and send directly to the employee or sender using their verified email address Especially when it comes to matters regarding a change to personal or banking information, taking the extra step to ensure it’s actually the employee making the request is recommended. In all scenarios, replying to the original, potentially-fraudulent email is not recommended. Even if a reply doesn’t disclose confidential information that would cause financial loss to your business, engaging with cyber-criminals can still make you and your business vulnerable to other forms of social engineering. If you’ve received a fraudulent email, a safe course of action is to block the sender and delete the communication from your inbox. It’s important to remember that neither the size nor location of your business make you any less vulnerable to cyberattacks. Cyber-criminals are trying to take advantage of any unsuspecting recipient, and they’re hoping the authenticity of the request doesn’t get verified before the change has been applied. *Our security and governance experts here at Payworks have developed lots of helpful resources for empowering Canadian businesses to better protect themselves. Find them by downloading a free copy of our Security Best Practices E-Book: [https://www.payworks.ca/landing-pages/campaigns/security-best-practices-e-book](https://www.payworks.ca/landing-pages/campaigns/security-best-practices-e-book). * Key topics in this article: [Resources](https://blog.payworks.ca/tag/resources)[Payroll Resources](https://blog.payworks.ca/tag/payroll-resources)[Cyber Security Awareness](https://blog.payworks.ca/tag/cyber-security-awareness)[Business Owner](https://blog.payworks.ca/tag/business-owner)[HR Management](https://blog.payworks.ca/tag/hr-management)[SME](https://blog.payworks.ca/tag/sme)[Franchisee](https://blog.payworks.ca/tag/franchisee)[Hospitality](https://blog.payworks.ca/tag/hospitality)[Bookkeeper](https://blog.payworks.ca/tag/bookkeeper)[Payroll Management](https://blog.payworks.ca/tag/payroll-management) These articles are produced by Payworks as an information service. They are not intended to substitute professional legal, regulatory, tax, or financial advice. Readers must rely on their own advisors, as applicable, for such advice. [![Alberta HR compliance in 2026: what you need to know](https://blog.payworks.ca/hs-fs/hubfs/BlogBanner_AB_Compliance_Aug4.jpg?width=300&name=BlogBanner_AB_Compliance_Aug4.jpg)](https://blog.payworks.ca/alberta-hr-compliance-in-2026-what-you-need-to-know?hsLang=en-ca) [Resources](https://blog.payworks.ca/tag/resources) | August 04, 2026 Alberta HR compliance in 2026: what you need to know Key Takeaways Alberta employers have a focused but impo… [![National Bank of Canada and Payworks: Built for Canadian Business](https://blog.payworks.ca/hs-fs/hubfs/BlogBanner_NB-PWK_July2026.jpg?width=300&name=BlogBanner_NB-PWK_July2026.jpg)](https://blog.payworks.ca/national-bank-of-canada-and-payworks-built-for-canadian-business?hsLang=en-ca) [Resources](https://blog.payworks.ca/tag/resources) | July 31, 2026 National Bank of Canada and Payworks: Built for Canadian Business Why Are Canadian Businesses Choosing Homegrown Solution… [![CPP2 and QPP2 Explained: What Canadian Employers Need to Know](https://blog.payworks.ca/hs-fs/hubfs/CPP2%20and%20QPP2%20What%20Canadian%20Employers%20Need%20to%20Know%20in%202026.png?width=300&name=CPP2%20and%20QPP2%20What%20Canadian%20Employers%20Need%20to%20Know%20in%202026.png)](https://blog.payworks.ca/cpp2-and-qpp2-explained-what-canadian-employers-need-to-know?hsLang=en-ca) [Resources](https://blog.payworks.ca/tag/resources) | July 21, 2026 CPP2 and QPP2 Explained: What Canadian Employers Need to Know Key Takeaways: As of January 1, 2024, Canadian employer… [![Québec HR compliance in 2026: your guide to what's in effect and what's ahead](https://blog.payworks.ca/hs-fs/hubfs/BlogBanner_QCEmployment_Law_Blog_July14.jpg?width=300&name=BlogBanner_QCEmployment_Law_Blog_July14.jpg)](https://blog.payworks.ca/quebec-hr-compliance-in-2026-your-guide-to-whats-in-effect-and-whats-ahead?hsLang=en-ca) [Resources](https://blog.payworks.ca/tag/resources) | July 10, 2026 Québec HR compliance in 2026: your guide to what's in effect and what's … Key Takeaways Québec employers are navigating one of th… [![Pay transparency is now law in three provinces. Is your business ready?](https://blog.payworks.ca/hs-fs/hubfs/BlogBanner_PayTransparency_July7.jpg?width=300&name=BlogBanner_PayTransparency_July7.jpg)](https://blog.payworks.ca/pay-transparency-is-now-law-in-three-provinces-is-your-business-ready?hsLang=en-ca) [Resources](https://blog.payworks.ca/tag/resources) | July 07, 2026 Pay transparency is now law in three provinces. Is your business ready? Key Takeaways [![Is your B.C. care home’s payroll data ready for the HEABC transition?](https://blog.payworks.ca/hs-fs/hubfs/BlogBanner_BCHomecare_Legisl_June30.jpg?width=300&name=BlogBanner_BCHomecare_Legisl_June30.jpg)](https://blog.payworks.ca/is-your-b.c.-care-homes-payroll-data-ready-for-the-heabc-transition?hsLang=en-ca) [Resources](https://blog.payworks.ca/tag/resources) | June 30, 2026 Is your B.C. care home’s payroll data ready for the HEABC transition? Key Takeaways: Eligible unionized B.C. long-term care (… [![Record of Employment (ROE): The Canadian Employer’s Guide](https://blog.payworks.ca/hs-fs/hubfs/BlogBanner_June25.jpg?width=300&name=BlogBanner_June25.jpg)](https://blog.payworks.ca/everything-you-need-to-know-about-roes?hsLang=en-ca) [Innovation](https://blog.payworks.ca/tag/innovation) | June 12, 2026 Record of Employment (ROE): The Canadian Employer’s Guide Key Takeaways: An ROE provides information on employmen… [![The Canadian 2026 guide to holiday stat pay employee eligibility](https://blog.payworks.ca/hs-fs/hubfs/BlogBanner_Legislation_April14-1.jpg?width=300&name=BlogBanner_Legislation_April14-1.jpg)](https://blog.payworks.ca/the-canadian-2026-guide-to-holiday-stat-pay-employee-eligibility?hsLang=en-ca) [Resources](https://blog.payworks.ca/tag/resources) | June 09, 2026 The Canadian 2026 guide to holiday stat pay employee eligibility Statutory holiday eligibility rules differ across every… [![Is your payroll provider keeping client data safe?](https://blog.payworks.ca/hs-fs/hubfs/BlogBanner_CyberSecurity_October3-3.jpg?width=300&name=BlogBanner_CyberSecurity_October3-3.jpg)](https://blog.payworks.ca/is-your-payroll-provider-keeping-client-data-safe?hsLang=en-ca) [Resources](https://blog.payworks.ca/tag/resources) | June 05, 2026 Is your payroll provider keeping client data safe? How to choose a secure payroll partner: a guide for acc… [![From reporting to understanding: meet Payworks Analytics](https://blog.payworks.ca/hs-fs/hubfs/BlogBanner_Analytics_Pro_June2026_EN_2x.jpg?width=300&name=BlogBanner_Analytics_Pro_June2026_EN_2x.jpg)](https://blog.payworks.ca/from-reporting-to-understanding-meet-payworks-analytics?hsLang=en-ca) [Innovation](https://blog.payworks.ca/tag/innovation) | June 02, 2026 From reporting to understanding: meet Payworks Analytics Key Takeaways [![What do employers need to know about Québec’s National Holiday?](https://blog.payworks.ca/hs-fs/hubfs/BlogBanner_May24-1.jpg?width=300&name=BlogBanner_May24-1.jpg)](https://blog.payworks.ca/fete-nationale-du-quebec-stat-holiday-legislation?hsLang=en-ca) [Resources](https://blog.payworks.ca/tag/resources) | May 29, 2026 What do employers need to know about Québec’s National Holiday? Key takeaways La fête nationale du Québec (June 24) is … [![No surprises, no hidden fees – just affordable, accurate payroll](https://blog.payworks.ca/hs-fs/hubfs/BlogArticle_Pricing_May26.jpg?width=300&name=BlogArticle_Pricing_May26.jpg)](https://blog.payworks.ca/no-surprises-no-hidden-fees-just-affordable-accurate-payroll?hsLang=en-ca) [Resources](https://blog.payworks.ca/tag/resources) | May 26, 2026 No surprises, no hidden fees – just affordable, accurate payroll Key Takeaways: Payworks offers transparent payroll pric… ![ ](https://blog.payworks.ca/hubfs/Payworks%20Stock%20Photography/Cavan%20-%20Arlee.png) ## Seeing is believing! Curious what better Canadian workforce management looks like in action (and how much time you could reclaim in your day-to-day)? Book a pressure-free, get-to-know you demo today. [REQUEST A DEMO](https://www.payworks.ca/landing-pages/campaigns/book-a-demo) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Stefan DeCosse", "url" : "https://blog.payworks.ca/author/stefan-decosse" }, "dateModified" : "2024-01-10T21:07:40.140Z", "datePublished" : "2022-06-07T13:00:00.000Z", "headline" : "Watch out for this common online fraud tactic to better protect your business", "image" : [ "https://blog.payworks.ca/hubfs/BlogPost_CyberSecurity_June7-1.jpg" ], "mainEntityOfPage" : { "@id" : "https://blog.payworks.ca/watch-out-for-this-common-online-fraud-tactic-to-better-protect-your-business", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.payworks.ca/hubfs/Payworks.png" }, "name" : "Payworks" } } ```