E-Financial
How Organisations Can Prevent Financial Losses via Innovative Email Protection
By peter oluka
Many business organisations and public institutions are faced one way or the other with challenges of their corporation email been compromised. This to a large extent has brought loss of businesses or embarrassment.
Those who have not been able to successfully manage it by being on top of the situation are those whose knowledge and technology partnership need to be upgraded.
In the technology parlance, the Business e-mail compromise (BEC) is when an attacker hacks into a corporate e-mail account and impersonates the real owner to defraud the company, its customers, partners, and/or employees into sending money or sensitive data to the attacker’s account.
BEC is also known as a “man-in-the-email” attack. This is derived from the “man-in-the-middle” attack where two parties think that they are talking to each other directly, but in reality, an attacker is listening in and possibly altering the communication.
This is how it works. A BEC scam starts with research. An attacker will sift through publicly available information about your company from your website, press releases, and even social media posts.
He/she might look for the names and official titles of company executives, your corporate hierarchy, and even travel plans from email auto-replies.
The attacker will then try to gain access to an executive’s e-mail account. To remain undetected, he/she might use inbox rules or change the reply-to address so that when the scam is executed, the executive will not be alerted.
Another trick is to create an e-mail with a spoofed domain. For example, the attacker might use mohammed.adeyemi@samp1e.cominstead of mohammed.adeyemi@sample.com, or emeka.damola@believeme.com instead of emeka.damola@beleiveme.com. If you do not pay close attention, it is easy to get fooled by these slight differences. One of the most famous spoofed domain tricks ever was the “PayPa1.com” – a scam site imitating money transfer website Paypal.com.
After scouting corporate communications for some time, the attacker will probably have a good idea of scam scenarios that might work. For instance, if the company has a lot of suppliers, he/she can send invoices to account for the rush payment of materials. The attacker would know who is responsible for wire transfers and be able to craft a convincing scenario that would require the immediate transfer of funds.
Some of the most prevalent examples of BEC scams are:
- The fraudulent invoice scamis when a cybercriminal uses an employee’s e-mail to send notifications to customers and suppliers asking for payment to the cybercriminal’s account.
- The fake boss scamis when a fraudulent email is sent from a business executive’s account to employees instructing them to urgently transfer money from the corporate account to the criminal’s account.
- The fake attorney scamis when a lawyer’s e-mail address is used to contact clients, asking that they pay money immediately to keep things confidential.
However, business e-mail compromise attacks do not only involve money; sometimes, attackers seek PII or trade secrets.
One high-profile BEC case involved a Lithuanian cybercriminal that used the e-mail addresses of suppliers. Companies that were targeted include Apple and Facebook. By impersonating suppliers, the hacker was able to steal $100 million in two years. In another case, the FACC Ag CEO was fired after such an attack cost the company $54 million.
In 2016, there were at least 40,000 incidents of business e-mail compromise or other incidents that involve e-mails—an increase of around 2,370% since January 2015. In the second half of 2016 alone, the FBI reported more than 3,044 victims in the United States, with a combined loss of around $346 million. Where does most of the money go?
Most of the victims are told to send the money to an Asian bank, usually in Hong Kong or China, or a bank in the United Kingdom.
But you can protect your business or organisation from all these challenges!
Business e-mail compromise attacks are successful for three main reasons:
- Insufficient security protocols
- Social engineering
- Lack of employee awareness
Multi-factor authentication should be implemented as an IT security policy. This will help prevent unauthorized access to e-mails, especially if an attacker attempts to login from a new location. In addition to stronger security protocols, employee education is also important.
Employees should be trained on identifying fraudulent e-mails. Always be skeptical of urgent and rush money transfer requests, especially from C-level executives, and verify those requests, either by phone or in person.
According to Victor Ugwu, Signal Alliance, technical security consultant, the company offers a robust and adaptive email security solution on- premise and in the cloud. Beyond email security, they also provide a tested and trusted Cybersecurity solutions ranging from; Perimeter Security, Infrastructure Security, Cloud, Mobile Security and Managed Security Service.
PalmPay, a leading digital banking platform in Africa has announced the launch of strategic partnerships with top-tier insurance providers to offer accessible, affordable and simplified insurance products directly within the PalmPay app.
This initiative reflects the brand’s continued commitment to deepening financial inclusion and underscores its mission to improve the wellbeing of everyday Nigerians.
With only about 8.9% of Nigerians currently covered by any form of health insurance, the country remains one of the least insured populations in Africa. Barriers such as low awareness, affordability challenges, and trust issues continue to hinder broader adoption of insurance products.
PalmPay’s new insurance offering directly addresses these challenges by simplifying the purchase and management of insurance policies within the app. The PalmPay insurance feature is designed to make essential coverage, from health to device, and life insurance easily accessible at affordable prices, eliminating the traditional complexities often associated with insurance.
“Insurance is often perceived as complex or inaccessible, especially among underserved communities.” said Habib Kowontan, Head of Wealth Product at PalmPay. “Through these partnerships, we aim to break down those barriers by offering simple, reliable and affordable insurance options that are easily accessible within the PalmPay app.”
With over 35 million users across Nigeria, PalmPay continues to evolve as a smart, consumer-first digital banking platform. The integration of insurance services complements its growing suite of offerings, which includes transfers, bill payments, high-interest savings, and debit card services, making PalmPay one of the most comprehensive digital banking platforms in the African market.
“Our goal at PalmPay is to remove barriers and make essential services easily accessible to everyone,” said Mr Chika Nwosu, Managing Director of PalmPay. “Through these strategic partnerships, we’re expanding our services to be more inclusive and empowering our users with products that will positively impact their lives and finances.”
This rollout marks a significant milestone in PalmPay’s broader strategy to empower users with tools that enhance their daily lives. Building not just a payments app, but a smart and trusted financial partner for millions of Nigerians.
In a timely gesture aimed at improving the plight of internally displaced persons (IDP) in Benue State, leading financial institution, Fidelity Bank Plc, has distributed mattresses and essential food items to over 2,000 victims of the Yelwata attacks currently taking refuge at the Ultra-Modern International Market IDP Camp in Makurdi.
Team Lead, CSR, Fidelity Bank Plc, Victoria Abuka (Left); CEO, The Abbasid Charity Foundation, Hauwa Abbas (Centre); and Branch Leader, Fidelity Bank Plc, Makurdi, Terwase (Right), representing the Regional Bank Head, North Central, Sadi Zawiya, with some beneficiaries during the Fidelity Food Bank distribution event in Makurdi, Benue State recently.
The donation, which was carried out in collaboration with the Abbasid Charity Foundation, is part of Fidelity Bank’s ongoing commitment to supporting vulnerable communities through its flagship Fidelity Food Bank program. Since its launch in April 2023, the Food Bank has distributed over 200,000 food packs to beneficiaries across Nigeria’s six geo-political zones.
Speaking about the donation event, the bank’s Divisional Head, Brand and Communications, Dr. Meksley Nwagboh reaffirmed Fidelity Bank’s dedication to Corporate Social Responsibility (CSR) and its mission to uplift communities.
His words, “Since its launch, the Fidelity Food Bank initiative has helped to alleviate the effect of poverty and malnutrition across the country. We are honored to be back in Benue State to continue this impactful initiative, and we hope that today’s donation brings much-needed relief and comfort to the beneficiaries during this difficult time”.
In her remarks, the Executive Officer, the Abbasid Charity Foundation, Mrs. Hawa Abbas, emphasized the importance of restoring dignity to the displaced, stating that the donation of mattresses was to ensure the IDPs no longer sleep on bare floors.
“This gesture is our way of letting the displaced persons know that they are not forgotten. We care deeply for them, and we hope this donation offers some comfort and hope, even in these difficult circumstances,” Abbas noted.
The Executive Secretary of the Benue State Emergency Management Agency (SEMA), Dr. James Iorpuu, who was represented by Camp Manager, Mr. Robert Nyom, expressed deep appreciation to Fidelity Bank and the Abbasid Charity Foundation for their timely support.
“Your intervention has brought much-needed relief to the camp and we thank you for your compassion and generosity towards improving the welfare of the displaced persons,” he said.
The bank’s outreach to the International Market IDP Camp in Makurdi represents the most recent of its ongoing critical and timely interventions. Previously, through its Food Bank Initiative, the bank provided essential food items to more than 1,500 residents impacted by the recent flood disaster in Mokwa, Niger State.
Ranked among the best banks in Nigeria, Fidelity Bank Plc is a full-fledged Commercial Deposit Money Bank serving over 9.1 million customers through digital banking channels, its 255 business offices in Nigeria and United Kingdom subsidiary, FidBank UK Limited.
The Bank is the recipient of multiple local and international Awards, including the 2024 Excellence in Digital Transformation & MSME Banking Award by BusinessDay Banks and Financial Institutions (BAFI) Awards; the 2024 Most Innovative Mobile Banking Application award for its Fidelity Mobile App by Global Business Outlook, and the 2024 Most Innovative Investment Banking Service Provider award by Global Brands Magazine. Additionally, the Bank was recognized as the Best Bank for SMEs in Nigeria by the Euromoney Awards for Excellence and as the Export Financing Bank of the Year by the BusinessDay Banks and Financial Institutions (BAFI) Awards.
US Secret Service has quietly seized nearly $400 million in digital assets over the past decade, amassing one of the world’s largest crypto cold wallets, Bloomberg reported at the weekend, citing people familiar with the matter.
The agency’s Global Investigative Operations Center (GIOC) has tracked funds through open-source tools, blockchain analysis, and patience, Jamie Lam, an investigative analyst with the US Secret Service, reportedly told law enforcement officials in Bermuda last month.
The agency’s crypto trove, much of which sits in a single cold-storage wallet, results from a string of investigations into scams. Scammers lure targets into seemingly legitimate crypto investment platforms in one typical scheme.
Victims often see initial profits before the sites vanish with their deposits.
“That’s how they do it,” Lam said. “They’ll send you a photo of a really good-looking guy or girl. But it’s probably some old guy in Russia.”
Lam’s team uses domain records, blockchain transactions, and VPN slip-ups to identify fraudsters. In one case, a cryptocurrency payment led investigators to another wallet. In another one, a brief VPN failure exposed an IP address, helping agents piece together the scam’s digital trail.
At the helm of the Secret Service’s crypto strategy is Kali Smith, who directs a team that has trained officials in over 60 countries to unmask online financial crimes.
The agency has focused on jurisdictions with weak oversight or programs selling residency to foreign nationals. “Sometimes after just a week-long training, they can be like, ‘Wow, we didn’t even realize that this is occurring in our country,’” Smith said.
The Secret Service’s work has uncovered scams ranging from romance-investment schemes to sextortion cases. One investigation involved an Idaho teenager who sent a nude photo to an online stranger. The scammer extorted $300 twice before the teen went to the police.
Analysts traced the payments through another coerced teenager acting as a money mule, leading to an account tied to nearly $4.1 million in transactions under a Nigerian passport.
British police arrested the suspected extortionist when he arrived in Guildford, England, where he remains in custody pending extradition.
4 Dead, 20 Others Injured as Fire Engulfs Cairo Data Centre
EFCC Re-Arraigns Echefu, TStv CEO for Allegedly Defrauding Ex-Minister of N1Bn, $1.3m
FG Declares Admissions outside CAPS Illegal
Nigeria Loses over N200Bn from SSB Tax Annually – CAPPA
Jumia Replatforms its Retail Media Program to Mirakl Ads to Enhance Marketplace Advertising
Telecom3 days agoY’ello Care’s 21-Day Campaign Bridges Digital Divide for Thousands Nationwide
General News3 days agoEnugu Air Commences Operations Today
E-Business3 days agoGalaxy Backbone, Rural Electrification Agency Commit to Deepening Digital and Energy Access Across Nigeria
Broadcasting3 days agoNDPC Slaps Multichoice with ₦766M Fine for Data Privacy Violations
News3 days agoLagos-Calabar Highway Gets $100M Push from ECOWAS to Drive Regional Growth
Telecom3 days ago20 Years of Digital Leadership: Layer3’s Legacy and the Road Ahead
News3 days agoNBS May Release Rebased Figures for Nigerian Economy July 11
Telecom2 days agoNCC Wins Global ICT Award for Digital Awareness in Schools