Always check any unusual payment requests directly, ideally in person or by telephone, to confirm the instruction is genuine. Do not use contact details from an email or letter.

Establish documented internal processes for requesting and authorising all payments and be suspicious of any request to make a payment outside of the company’s standard process.

Be cautious about any unexpected emails or letters which request urgent bank transfers, even if the message appears to have originated from someone from your own organisation.

Contact your bank straight away if you think you may have fallen victim to CEO fraud.

Always confirm any bank account details directly with the genuine company either on the telephone or in person before you make a payment or transfer any money.

Criminals can access or alter emails to make them look genuine. If you receive an email telling you to change payment details do not use the contact details in an email, instead check the company’s official website or documentation.

If you are making a payment to an account for the first time, transfer a small sum first and then check with the company using known contact details that the payment has been received.

Contact your bank straight away if you think you may have fallen victim to an invoice or mandate scam.