Why work creates particular scam opportunities
Working life combines authority, deadlines, payments, shared systems and regular changes in responsibility. A false request can therefore look like a normal task: an invoice to pay, a document to open, a password to reset or a message from a senior colleague.
The safest response is not to distrust every request. It is to recognise when the route, destination or level of urgency has changed and to check through a separate channel.
Common situations
Jobs and recruitmentUpfront fees, false employers, equipment payments and identity collection.Identity and authoritySeparate the existence of an organisation from the authority of the person contacting you.Account accessProtect email, cloud services, recovery routes and active sessions.Remote accessRespond when a caller has been given control of a work or personal device.
A practical checking routine
- Pause when something changes. A new bank account, unusual secrecy, urgent login or unexpected attachment deserves a separate check.
- Leave the message. Open the known work system, directory or supplier record independently.
- Verify the exact request. Confirm the payment, document or access change—not merely the sender’s name.
- Use two people for high-impact changes. Follow the organisation’s approval process even when the request appears senior.
- Report quickly. Early reporting can protect colleagues, customers and accounts as well as the person who received the request.
If something has already happened
Contact the employer’s security or finance route promptly. If money moved, contact the bank using a checked number. Preserve the message, payment details and relevant logs. Do not continue with an unsolicited person offering recovery or technical help.