{"course":{"slug":"ai-for-small-business","title":"AI for a Small Business","url":"https://addaly.com/learn/ai-for-small-business","level":"beginner","track":"work"},"lesson":{"slug":"security-got-harder","title":"Why fraud against small businesses got better","url":"https://addaly.com/learn/ai-for-small-business/security-got-harder","position":82,"of":88,"minutes":9,"answer":"Generative tools removed the cues small businesses relied on to spot fraud (bad grammar, a wrong voice, a generic message) so verification has to move to a channel the attacker does not control.","keyIdea":"Generative tools removed the cues small businesses relied on to spot fraud (bad grammar, a wrong voice, a generic message) so verification has to move to a channel the attacker does not control."},"body":{"format":"markdown","text":"## The defences that stopped working\n\nFor twenty years small businesses filtered fraud on surface cues. Odd phrasing. A generic greeting. A supplier email that did not sound like the person who usually writes it.\n\nAll three are now cheap to fix. A fraudulent email can be written in fluent, idiomatic English, or in your own language, personalised from your public website and your staff page, referencing a real project. None of that requires skill any more.\n\nThis is the most concrete way AI has changed risk for small businesses, and it has nothing to do with whether you use AI yourself.\n\n## The three attacks that actually land\n\n**Invoice redirection.** Someone watches a real email thread (often through a compromised mailbox at your supplier, not yours) and at the right moment sends a message saying the bank details have changed. It arrives in the real thread, in the right tone, at the moment an invoice was expected. This is the single most expensive fraud against small businesses in most reported figures, and AI has made the writing indistinguishable.\n\n**Voice cloning.** A few seconds of audio is now enough to produce a convincing clone. Your voice is on your website video, your voicemail greeting, an interview. The call goes to whoever handles payments, from a spoofed number, and it is the boss asking for an urgent transfer. Cases of this are well documented and the amounts are large.\n\n**Fake suppliers and fake customers.** Plausible websites, complete catalogues, real-looking company details, all produced in an afternoon.\n\n## The one defence that works\n\nVerification on a channel the attacker does not control.\n\nConcretely: any change to bank details, and any payment above a threshold you set, is verified by calling a number you already had: from your records, not from the email, not from the caller display, not from the signature block.\n\nThat is it. It defeats all three attacks above, because it does not depend on judging whether the message looked right. It is also the control most small businesses do not have, because it feels rude to ring a supplier to check.\n\n> Figure: The callback that defeats all three attacks. Steps: 1. An instruction arrives (An email inside the real thread saying the bank details have changed, or a voice on the phone asking for an urgent transfer.); 2. Does it move money (A change to bank details, or a payment above the threshold you set. Urgency is a reason to slow down rather than to hurry.); 3. Ring the number you already had (From your own records. Not the number in the email, not the caller display, not the signature block.); 4. Then pay, or do not (Nobody is ever criticised for delaying a payment to verify it, and the criticism runs the other way.). Fluent writing, a familiar voice and a plausible website are all cheap now, so judging the message is the wrong game to be playing. This control works because it does not depend on whether the message looked right.\n\nSay so out loud with your suppliers and customers, in advance: *we always ring to confirm bank detail changes, and we would like you to do the same with us.* It stops being awkward the moment both sides expect it.\n\n## A code word for voice\n\nFor the voice-clone case, agree a word or a question with anybody who can authorise a payment. Something not on the internet: not a pet's name, not a school. Asked and answered in ten seconds.\n\nThis sounds theatrical until you consider the alternative, which is deciding whether a voice you know well is them, under time pressure, while they are insistent.\n\n## The other direction: what your own assistant gives away\n\nFraud also arrives through the tools you deployed. A website assistant grounded in your documents will answer questions asked by anybody, including somebody building a convincing approach to your staff.\n\nAsk your own bot who handles your accounts, which bank you use, when the owner is away, and what your payment terms are. If it answers, that information is now a public resource, assembled and phrased helpfully.\n\nThe fix is the one from module four: ground it in a deliberately chosen set of documents rather than everything you have, and keep staff names, roles and internal process out of that set.\n\n## Urgency is the signal\n\nThe one cue that survives is pressure. Nearly every one of these attacks needs you to act before you check: the payment is late, the boss is in a meeting, the account will be closed.\n\nMake that explicit in your process. Urgency is a reason to slow down, and any genuine counterparty will accept a ten-minute delay for verification. The ones who will not are telling you something.\n\n## What this means for a small business\n\nTwo hours of work, once. Write down the payment rule with the threshold and the callback. Agree the code word. Tell your suppliers. Tell whoever can move money that they will never be criticised for delaying a payment to verify it, and that the criticism runs the other way.\n\nThen the honest part: no filter, no tool and no amount of vigilance replaces the callback. The attacks are now good enough that judging the message is the wrong game to be playing, and moving the decision to a channel you already trusted is the only reliable way out of it."},"check":{"question":"A supplier emails from the correct address, in the usual thread and the usual tone, saying their bank details have changed and attaching a letter on headed paper. What should the bookkeeper do?","options":[{"text":"Reply in the thread asking the supplier to confirm the change, since a reply goes to the genuine address and an attacker reading the mailbox would not be able to answer as the supplier.","correct":false,"tempting":"Assumes the mailbox is not the thing compromised, which in this pattern is exactly what it usually is."},{"text":"Pay the invoice to the old account, since paying a known-good account cannot lose money and the supplier will make contact if the payment does not arrive.","correct":false,"tempting":"Avoids the fraud and creates a payment dispute if the change was genuine, where a two-minute call resolves both outcomes."},{"text":"Ring the supplier on the number already in the firm's records and ask.","correct":true},{"text":"Check the headed letter for signs of manipulation and compare the new account name against the supplier's registered company name before releasing payment.","correct":false,"tempting":"Document checks and account-name matching are worth doing and are defeated by a competent forgery and a matching account name."}]},"prev":{"slug":"one-page-ai-policy","title":"The one page your staff actually need","url":"https://addaly.com/learn/ai-for-small-business/one-page-ai-policy"},"next":{"slug":"when-somebody-leaves","title":"The week somebody leaves","url":"https://addaly.com/learn/ai-for-small-business/when-somebody-leaves"},"authorship":"Founder and series editor: Dr Mustafa Mun. Written by AI models to a written standard. Exam keys checked blind by a second model: 3,665 of 3,666 agreed. Academic review invited.","review":{"status":"Draft, open for academic review"},"cite":"Addaly (2026) 'Why fraud against small businesses got better', in AI for a Small Business. Edited by M. Mun. Addaly. Available at: https://addaly.com/learn/ai-for-small-business/security-got-harder (Accessed: 13 October 2026).","licence":{"name":"CC BY-NC-SA 4.0","url":"https://creativecommons.org/licenses/by-nc-sa/4.0/"},"reader":{"schema":1,"title":"Why fraud against small businesses got better","courseTitle":"AI for a Small Business","module":{"index":9,"slug":"cost-risk-and-the-long-run","title":"What it costs, what it risks, and what happens in a year"},"answer":null,"keyIdea":"Generative tools removed the cues small businesses relied on to spot fraud (bad grammar, a wrong voice, a generic message) so verification has to move to a channel the attacker does not control.","hero":{"kind":"figure","figure":{"t":"figure","label":"Figure","figure":{"type":"flow","steps":[{"label":"An instruction arrives","detail":"An email inside the real thread saying the bank details have changed, or a voice on the phone asking for an urgent transfer."},{"label":"Does it move money","detail":"A change to bank details, or a payment above the threshold you set. Urgency is a reason to slow down rather than to hurry."},{"label":"Ring the number you already had","detail":"From your own records. Not the number in the email, not the caller display, not the signature block."},{"label":"Then pay, or do not","detail":"Nobody is ever criticised for delaying a payment to verify it, and the criticism runs the other way."}],"title":"The callback that defeats all three attacks","caption":"Fluent writing, a familiar voice and a plausible website are all cheap now, so judging the message is the wrong game to be playing. This control works because it does not depend on whether the message looked right."},"alt":"Figure: The callback that defeats all three attacks. Steps: 1. An instruction arrives (An email inside the real thread saying the bank details have changed, or a voice on the phone asking for an urgent transfer.); 2. Does it move money (A change to bank details, or a payment above the threshold you set. Urgency is a reason to slow down rather than to hurry.); 3. Ring the number you already had (From your own records. Not the number in the email, not the caller display, not the signature block.); 4. Then pay, or do not (Nobody is ever criticised for delaying a payment to verify it, and the criticism runs the other way.). Fluent writing, a familiar voice and a plausible website are all cheap now, so judging the message is the wrong game to be playing. This control works because it does not depend on whether the message looked right."}},"blocks":[{"t":"h2","id":"the-defences-that-stopped-working","runs":[{"text":"The defences that stopped working"}]},{"t":"p","runs":[{"text":"For twenty years small businesses filtered fraud on surface cues. Odd phrasing. A generic greeting. A supplier email that did not sound like the person who usually writes it."}]},{"t":"p","runs":[{"text":"All three are now cheap to fix. A fraudulent email can be written in fluent, idiomatic English, or in your own language, personalised from your public website and your staff page, referencing a real project. None of that requires skill any more."}]},{"t":"p","runs":[{"text":"This is the most concrete way AI has changed risk for small businesses, and it has nothing to do with whether you use AI yourself."}]},{"t":"h2","id":"the-three-attacks-that-actually-land","runs":[{"text":"The three attacks that actually land"}]},{"t":"p","runs":[{"text":"Invoice redirection.","b":true},{"text":" Someone watches a real email thread (often through a compromised mailbox at your supplier, not yours) and at the right moment sends a message saying the bank details have changed. It arrives in the real thread, in the right tone, at the moment an invoice was expected. This is the single most expensive fraud against small businesses in most reported figures, and AI has made the writing indistinguishable."}]},{"t":"p","runs":[{"text":"Voice cloning.","b":true},{"text":" A few seconds of audio is now enough to produce a convincing clone. Your voice is on your website video, your voicemail greeting, an interview. The call goes to whoever handles payments, from a spoofed number, and it is the boss asking for an urgent transfer. Cases of this are well documented and the amounts are large."}]},{"t":"p","runs":[{"text":"Fake suppliers and fake customers.","b":true},{"text":" Plausible websites, complete catalogues, real-looking company details, all produced in an afternoon."}]},{"t":"h2","id":"the-one-defence-that-works","runs":[{"text":"The one defence that works"}]},{"t":"p","runs":[{"text":"Verification on a channel the attacker does not control."}]},{"t":"p","runs":[{"text":"Concretely: any change to bank details, and any payment above a threshold you set, is verified by calling a number you already had: from your records, not from the email, not from the caller display, not from the signature block."}]},{"t":"p","runs":[{"text":"That is it. It defeats all three attacks above, because it does not depend on judging whether the message looked right. It is also the control most small businesses do not have, because it feels rude to ring a supplier to check."}]},{"t":"p","runs":[{"text":"Say so out loud with your suppliers and customers, in advance: "},{"text":"we always ring to confirm bank detail changes, and we would like you to do the same with us.","i":true},{"text":" It stops being awkward the moment both sides expect it."}]},{"t":"h2","id":"a-code-word-for-voice","runs":[{"text":"A code word for voice"}]},{"t":"p","runs":[{"text":"For the voice-clone case, agree a word or a question with anybody who can authorise a payment. Something not on the internet: not a pet’s name, not a school. Asked and answered in ten seconds."}]},{"t":"p","runs":[{"text":"This sounds theatrical until you consider the alternative, which is deciding whether a voice you know well is them, under time pressure, while they are insistent."}]},{"t":"h2","id":"the-other-direction-what-your-own-assistant-gives-away","runs":[{"text":"The other direction: what your own assistant gives away"}]},{"t":"p","runs":[{"text":"Fraud also arrives through the tools you deployed. A website assistant grounded in your documents will answer questions asked by anybody, including somebody building a convincing approach to your staff."}]},{"t":"p","runs":[{"text":"Ask your own bot who handles your accounts, which bank you use, when the owner is away, and what your payment terms are. If it answers, that information is now a public resource, assembled and phrased helpfully."}]},{"t":"p","runs":[{"text":"The fix is the one from module four: ground it in a deliberately chosen set of documents rather than everything you have, and keep staff names, roles and internal process out of that set."}]},{"t":"h2","id":"urgency-is-the-signal","runs":[{"text":"Urgency is the signal"}]},{"t":"p","runs":[{"text":"The one cue that survives is pressure. Nearly every one of these attacks needs you to act before you check: the payment is late, the boss is in a meeting, the account will be closed."}]},{"t":"p","runs":[{"text":"Make that explicit in your process. Urgency is a reason to slow down, and any genuine counterparty will accept a ten-minute delay for verification. The ones who will not are telling you something."}]},{"t":"h2","id":"what-this-means-for-a-small-business","runs":[{"text":"What this means for a small business"}]},{"t":"p","runs":[{"text":"Two hours of work, once. Write down the payment rule with the threshold and the callback. Agree the code word. Tell your suppliers. Tell whoever can move money that they will never be criticised for delaying a payment to verify it, and that the criticism runs the other way."}]},{"t":"p","runs":[{"text":"Then the honest part: no filter, no tool and no amount of vigilance replaces the callback. The attacks are now good enough that judging the message is the wrong game to be playing, and moving the decision to a channel you already trusted is the only reliable way out of it."}]}],"check":{"question":[{"text":"A supplier emails from the correct address, in the usual thread and the usual tone, saying their bank details have changed and attaching a letter on headed paper. What should the bookkeeper do?"}],"options":[{"text":[{"text":"Reply in the thread asking the supplier to confirm the change, since a reply goes to the genuine address and an attacker reading the mailbox would not be able to answer as the supplier."}],"correct":false,"tempting":[{"text":"Assumes the mailbox is not the thing compromised, which in this pattern is exactly what it usually is."}]},{"text":[{"text":"Pay the invoice to the old account, since paying a known-good account cannot lose money and the supplier will make contact if the payment does not arrive."}],"correct":false,"tempting":[{"text":"Avoids the fraud and creates a payment dispute if the change was genuine, where a two-minute call resolves both outcomes."}]},{"text":[{"text":"Ring the supplier on the number already in the firm’s records and ask."}],"correct":true,"tempting":null},{"text":[{"text":"Check the headed letter for signs of manipulation and compare the new account name against the supplier’s registered company name before releasing payment."}],"correct":false,"tempting":[{"text":"Document checks and account-name matching are worth doing and are defeated by a competent forgery and a matching account name."}]}],"order":[3,2,1,0],"why":null},"prev":{"slug":"one-page-ai-policy","title":"The one page your staff actually need","minutes":8},"next":{"slug":"when-somebody-leaves","title":"The week somebody leaves","minutes":8}}}