Don't Get Spooked by Cyber Tricks This Halloween

​While ghosts and goblins might be harmless fun, the real fright this season comes from cyber tricksters lurking in your inbox. As technology advances, so do the sneaky tactics of cybercriminals who use social engineering to deceive victims into handing over confidential information or money. From phishing emails that disguise themselves as friendly messages to fraudulent fund requests that seem all too real, these digital monsters are masters of disguise. Learn how to spot their tricks, strengthen your defenses, and keep your personal and financial information safe from the scariest scams online.

A growing threat across industries is social engineering fraud—scams targeting people, not just systems. Technology makes life convenient and efficient—but also creates openings for fraudsters. Many scams now rely less on hacking and more on exploiting human trust. Social engineering occurs when criminals trick individuals into sharing sensitive information or sending money. Even with advanced technology in place, human vigilance is the strongest defense for your assets.

Common Social Engineering Tactics
Phishing
Phishing scams appear as emails or texts from a trusted source—a bank, coworker, or friend. They may contain links or attachments that install malware, granting attackers access to your computer, contacts, or accounts.

• Phishing: Sent to large groups, hoping someone takes the bait.
• Spear Phishing: A targeted email aimed at a specific person or organization.

Business Email Compromise (Fraud)
Fraudsters impersonate supervisors, vendors, or partners and request wire transfers or sensitive data. Fake email addresses often closely mimic real ones—like [email protected] instead of [email protected]. A quick glance can be the difference between detecting a scam and sending funds to criminals.

What’s at Risk?
Social engineering scams can lead to the theft of:

• Account numbers and PINs
  
  • This can cause unauthorized cash withdrawals from accounts.
• Personally identifiable information, such as Social Security numbers, dates of birth, and addresses
  
  • This can result in identity theft and fraud.
• Confidential customer data
  
  • This can lead to a loss of trust and potentially result in legal issues.
• Company trade secrets and intellectual property
  
  • This risks competitive disadvantage and financial loss.

Consequences include unauthorized transfers, identity theft, reputational harm, and compromised information.

How to Reduce Your Risk
1. Strengthen Internal Policies

• Implementing two-person approval enhances security for large or unusual wire transfers.
• Review account activity reports regularly to spot unauthorized charges.
• Never rely solely on email requests for money transfers—always verify through another trusted channel.

2. Protect Systems and Passwords

• Keep antivirus and firewall software updated.
• Use security tokens when available through your bank.
• Create strong passwords using a combination of letters, numbers, and symbols. Change  them regularly.

3. Train and Test Regularly 

• Conduct random phishing tests to identify vulnerabilities.
• Check email addresses and links for spelling errors or suspicious domains.
• Hover over links to confirm destinations before clicking.

Stay Vigilant
New scams emerge daily, and awareness is your best defense. Remind your team to stay alert, follow protocols, and think twice before clicking or responding. A few moments of caution can prevent major losses.

At Desmond Insurance, we’re here to help you safeguard what matters most. To learn more about cybersecurity coverage or protection strategies, contact our team anytime—we’re always here to help.