Business Email Scams Are Targeting Contractors More Than Ever

Okay, let’s paint this familiar picture.

A small contractor gets an email late Friday afternoon. It appears to be from a regular supplier and references an outstanding invoice. It says their banking information has changed. Suspecting everything is ‘business-as-usual,’ the office manager updates the payment information and sends $8,700 to the new account.

And on Monday, the real supplier calls asking about the overdue invoice.

Uh-oh.

Yeah, unfortunately, scenarios like this are becoming increasingly common. Business email scams are especially dangerous for contractors because construction and service businesses routinely exchange invoices, estimates, payment instructions, schedules, and documents by email. Further, routinely paying these suppliers and clearing that email from an inbox is the everyday, routine behavior of an AP Manager or office manager — they’re almost working on autopilot — and criminals know that, and they’re keen to take advantage of it.

Why Contractors Make Attractive Targets

Contractors often have money moving in several directions at once. Customers pay deposits. Subcontractors submit invoices. Vendors want payment. Office staff may be coordinating all of it while answering phones and scheduling crews.

An attacker doesn’t necessarily need to hack your accounting system. They don’t even need a lot of sophisticated spyware to figure out your bank accounts. They simply need to impersonate someone your staff already trusts. They just have to appear as routine.

A convincing email might claim to come from the owner asking for an urgent payment, a vendor announcing new banking information, or a customer requesting a refund to a different account. And the hacker is taking advantage of all of that chaos.

How to Protect Your Business

• Verify payment changes another way. If a vendor emails new banking or payment instructions, call them using a phone number you already have. Never rely on the phone number included in the suspicious email.

• Require a second set of eyes. Consider requiring two people to approve payments above a certain dollar amount. This simple procedure can stop an expensive mistake before money leaves the bank.

• Protect your email accounts. Every employee should use multi-factor authentication, particularly anyone handling invoices, payroll, banking, or administrative work. A stolen password should not be enough to access your company email.

• Teach employees to recognize unusual requests. Staff don't need extensive cybersecurity training or a degree in information systems security. They do need permission to question an email that feels unusual, rushed, or financially sensitive—even when it appears to come from the boss.

Good Email Security Protects More Than Email

Preventing business email scams isn't just about avoiding fraudulent payments. A compromised mailbox can expose customer information, contracts, employee records, invoices, and years of correspondence.

For a small contractor, one successful scam can mean thousands of dollars lost, damaged vendor relationships, and days spent figuring out what happened.

That hypothetical contractor who lost $8,700 could have stopped the entire incident with one phone call.

The goal isn't to make your business harder to operate. It's to put a few sensible safeguards between a convincing email and your bank account.

If you operate a small business or contracting company in Vancouver, WA or Portland, OR, Mickler & Associates, Inc. can help review your email security, Microsoft 365 environment, cybersecurity practices, cloud services, and overall IT setup. Contact us when you'd like a practical second opinion.

R

Preparing for Disaster

April is Emergency Communications Month at the Cybersecurity Infrastructure & Security Agency (CISA).

With its verdant landscapes and bustling cities, the Pacific Northwest is also home to one of the most significant seismic threats in the United States: the Cascadia Subduction Zone. Stretching from northern Vancouver Island to northern California, this fault line represents a geological boundary and a looming challenge for Vancouver, WA, and Portland, OR.

The Cascadia Subduction Zone, where the Juan de Fuca Plate is sliding beneath the North American Plate, has a history of producing massive earthquakes with magnitudes up to 9.0 or higher. The last such event occurred in 1700, sending a tsunami across the Pacific and jolting the region with ground-shaking of several minutes. Today, the implications for Vancouver and Portland metropolitan areas could be catastrophic, with scientists estimating a 1 in 3 chance of a significant quake in the next 50 years.

The risks associated with such an event are manifold. Infrastructure, much of which was built before the advent of modern seismic standards, could suffer extensive damage. This includes bridges, roads, and buildings, potentially isolating communities and hampering emergency response efforts. The economic impact could be staggering, with estimates suggesting billions of dollars in damages.

Moreover, the region's geography exacerbates the risk. The soft soils along the Columbia River, which both cities straddle, are particularly susceptible to liquefaction—a process where solid ground behaves like a liquid during intense shaking. This could lead to the collapse of structures, the severing of utility lines, and even landslides, further complicating rescue and recovery operations.

There are always risks of disaster. Whether it’s from earthquakes, forest fires, or a utility outage, this is the big one that keeps me up at night. I wonder how well the companies I work with will be prepared, specifically when communicating with employees and customers during a crisis. Now’s a good time to review IT Disaster Recovery Plans (DRP’s) and think about how emergency communication would go without Internet, mobile, text, and landline service; how would the business concern keep functioning?

In conclusion, while the beauty of the Pacific Northwest is undeniable, so is the threat posed by the Cascadia Subduction Zone. It underscores the need for continued investment in seismic research, building retrofits, and emergency preparedness efforts. For residents of Vancouver and Portland, understanding and preparing for these risks is not just prudent—it's imperative.

Do you have questions concerning your strategic position with an IT DRP? Contact me. Let’s talk it through.

The Problem of Electronic Waste in Vancouver, WA

In today's fast-paced world, electronic gadgets have become inseparable from our daily lives. However, rapid technological advancements and the constant desire for the latest devices have led to a significant issue—electronic waste, or e-waste. Electronic waste has grown to record levels. This refers to discarded electronic products; their management is a pressing concern, especially in places like Vancouver.

E-waste includes various items, from smartphones and laptops to refrigerators and televisions. The problem with these discarded items is their sheer volume and their harmful substances, such as lead, mercury, and cadmium. When improperly disposed of, these substances can contaminate our soil and water, posing serious environmental and health risks.

Vancouver, WA, is taking strides to manage this issue effectively. The city offers various e-waste recycling programs, encouraging residents to responsibly dispose of their electronic items. These programs help reduce environmental pollution and recover valuable materials like gold, silver, and copper, which can be reused in manufacturing new products.

For individuals unfamiliar with technology or e-waste, it's essential to understand the importance of proper disposal. Participating in local recycling programs, donating functional electronics for reuse, and choosing eco-friendly gadgets are small steps that make a big difference.

For a complete list of drop-off locations in Clark County, use Recycling A-Z and type "electronic materials" into the search box.

By taking action, the residents of Vancouver, WA, can lead by example and showcase how community efforts can combat the growing problem of electronic waste. Let's all do our part in creating a sustainable future.

R