Business Email Scams Are Targeting Contractors More Than Ever

Okay, let’s paint this familiar picture.

A small contractor gets an email late Friday afternoon. It appears to be from a regular supplier and references an outstanding invoice. It says their banking information has changed. Suspecting everything is ‘business-as-usual,’ the office manager updates the payment information and sends $8,700 to the new account.

And on Monday, the real supplier calls asking about the overdue invoice.

Uh-oh.

Yeah, unfortunately, scenarios like this are becoming increasingly common. Business email scams are especially dangerous for contractors because construction and service businesses routinely exchange invoices, estimates, payment instructions, schedules, and documents by email. Further, routinely paying these suppliers and clearing that email from an inbox is the everyday, routine behavior of an AP Manager or office manager — they’re almost working on autopilot — and criminals know that, and they’re keen to take advantage of it.

Why Contractors Make Attractive Targets

Contractors often have money moving in several directions at once. Customers pay deposits. Subcontractors submit invoices. Vendors want payment. Office staff may be coordinating all of it while answering phones and scheduling crews.

An attacker doesn’t necessarily need to hack your accounting system. They don’t even need a lot of sophisticated spyware to figure out your bank accounts. They simply need to impersonate someone your staff already trusts. They just have to appear as routine.

A convincing email might claim to come from the owner asking for an urgent payment, a vendor announcing new banking information, or a customer requesting a refund to a different account. And the hacker is taking advantage of all of that chaos.

How to Protect Your Business

• Verify payment changes another way. If a vendor emails new banking or payment instructions, call them using a phone number you already have. Never rely on the phone number included in the suspicious email.

• Require a second set of eyes. Consider requiring two people to approve payments above a certain dollar amount. This simple procedure can stop an expensive mistake before money leaves the bank.

• Protect your email accounts. Every employee should use multi-factor authentication, particularly anyone handling invoices, payroll, banking, or administrative work. A stolen password should not be enough to access your company email.

• Teach employees to recognize unusual requests. Staff don't need extensive cybersecurity training or a degree in information systems security. They do need permission to question an email that feels unusual, rushed, or financially sensitive—even when it appears to come from the boss.

Good Email Security Protects More Than Email

Preventing business email scams isn't just about avoiding fraudulent payments. A compromised mailbox can expose customer information, contracts, employee records, invoices, and years of correspondence.

For a small contractor, one successful scam can mean thousands of dollars lost, damaged vendor relationships, and days spent figuring out what happened.

That hypothetical contractor who lost $8,700 could have stopped the entire incident with one phone call.

The goal isn't to make your business harder to operate. It's to put a few sensible safeguards between a convincing email and your bank account.

If you operate a small business or contracting company in Vancouver, WA or Portland, OR, Mickler & Associates, Inc. can help review your email security, Microsoft 365 environment, cybersecurity practices, cloud services, and overall IT setup. Contact us when you'd like a practical second opinion.

R

How Local IT Support Improves Patient Experience

When people think about IT in a medical office, they often picture servers, passwords, and software updates. But in reality, technology plays a direct role in how patients experience your practice. From self-service scheduling and check-in to follow-up communication, reliable IT systems shape whether a visit feels smooth and professional (or slow, frustrating, and delayed).

Downtime is one of the quickest ways to erode patient confidence. If systems are slow, unavailable, or constantly malfunctioning, front desk staff struggle to check patients in, verify insurance, or access records. Appointments run behind schedule, and frustration builds in the waiting room. Consistent local IT support helps prevent these issues by maintaining systems, applying updates, and addressing problems before they become major disruptions.

Secure communication is another key factor. Patients increasingly expect email reminders, electronic forms, and even telehealth options. These tools must be convenient but also secure. Properly configured email encryption, patient portals, and file-sharing systems allow practices to communicate efficiently while protecting sensitive health information.

Reliable networks and well-maintained devices also speed up the check-in process. When systems work as intended, staff can focus on patient interaction rather than troubleshooting computers or waiting for screens to load. Faster workflows mean shorter wait times and a more professional, reassuring environment for patients.

Telehealth is another area where IT directly impacts satisfaction. Clear video connections, stable platforms, and secure access ensure virtual visits feel just as organized and dependable as in-person appointments.

Local IT support brings an additional advantage: responsiveness. When issues arise, having a nearby partner who understands your systems and can respond quickly keeps disruptions to a minimum.

In healthcare, patient trust is everything. When technology works seamlessly in the background, patients notice, and their confidence in your practice grows.

How can I help you? Just ask.

R

Interconnecting Brand Experiences Digitally

Your company, your product and service, are a brand. Your brand is a combination of visual arts and markings, logo, mottos and sayings, persons and representatives. Your brand has a message. Your brand hopefully makes and keeps its promises. A brand is a culmination of experiences.

Technology affords businesses an opportunity to connect those experiences digitally. A great example is a technology both my bank and financial software implemented this week on their iOS apps: touch ID authentication.

Touch ID on the iPhone 6 allows your thumb print to act as a security passphrase. It securely uses this biometric to allow access to the phone itself and these applications. It's a great feature of the iPhone.

When I think about experiences with these brands, though, touch ID offers something more than reasonable platform security. It's an ease-of-use - a convenience that enhances my user experience - that only strengthens my relationship with those brands. It's now easier for me than ever to access account data, tools, and resources, offered by these companies, and doing so cements my loyalty.

Meanwhile, on other apps where I access financial information, I still have to provide passwords. A manual process that takes a little longer and is less convenient, and that idea "Less Convenient" now interconnects my idea about that brand. 

I feel the same way about digital cash registers running on something like iPads as compared to traditional POS / registers. It takes seemingly forever to provide a credit card, swipe it, insert a code, walk through the cash back stuff, confirm the PIN, and execute the transaction on a traditional register. Then I have to wait for a printed receipt! Meanwhile, on the iPad, I swipe, tip, and go; the receipt is emailed to me. And in the future, I'll just be able to wave my phone in front of the register. Wow, what a convenience. What a pleasant experience.

Small and mid-range businesses have an opportunity to leverage inexpensive technology to create better, digitally-interconnected experiences, that enhance brand and cement loyalty. I think this is a fun exercise for management:

How are our technology solutions (both back stage employees and front stage consumers) providing for a fun, easy, compelling, or convenient experience?

If the answer is "Not sure" or "how is this relevant?", I think management is missing a huge opportunity to strategically apply technology to create such experiences, and to thereby differentiate their brand from competitors. In modern technology, it's the small digital interconnectedness of things that lends much larger (synergetic) capability and intelligence, and, offers compelling brand experiences.

R