As Australian businesses return to full swing after the holiday break, employees face an increased risk of falling victim to workplace scams. With many still working remotely, the start of the new year is a prime time for scammers to exploit post-holiday distractions and the shifting dynamics of office re-entry. These scams can range from fraudulent requests for gift cards to fake invoices that could cost businesses significant sums. Here’s a closer look at the most common scams targeting offices in January, real-life case studies, and tips on how to avoid falling victim.
1. Fake Bonus Scams: Fraudulent Requests for Gift Cards
One of the most prevalent scams seen in January involves fraudsters impersonating managers or HR representatives, claiming to offer bonuses or employee rewards. For example, in a recent case, an employee at a Melbourne-based company received an email that appeared to be from their HR department, stating that they had been selected for a special end-of-year bonus. The email requested that they purchase gift cards for staff members as part of a reward scheme. The scammer’s email looked convincing, with a formal signature and company logo, which led the employee to proceed with the request.
These types of scams often ask for gift cards or wire transfers, promising reimbursement or claiming that it’s the only way to “distribute bonuses” quickly. The scammer may even ask for the code numbers from the back of the cards or proof of the transaction. If the employee questions the request, the fraudster typically applies pressure, claiming it’s urgent due to a “tight deadline” or “internal policy.”
Red flags to watch out for:
- Requests for gift cards or untraceable payments.
- Urgency or threats about missed opportunities.
- Requests coming from unofficial channels, such as personal email addresses.
2. Fake Invoices: The Post-Holiday Surge
With the start of the new year, businesses often deal with a backlog of invoices, making them an easy target for scammers. One of the most common tactics is for fraudsters to send fake invoices that appear to be from legitimate suppliers. These fake invoices often look very similar to the company’s regular billing cycle and may even include real-looking account numbers, logos, and business details.
In one recent instance in Sydney, a small business received a seemingly legitimate invoice from a well-known supplier for products they hadn’t ordered. The company almost paid the invoice, which totalled thousands of dollars, before a more diligent staff member double-checked their records and noticed the discrepancy. It turns out the invoice was part of a sophisticated scam targeting businesses during the busy January period, where fraudsters know that administrative staff may still be catching up from the holiday break.
How to identify a fake invoice:
- Unfamiliar suppliers or orders.
- Slightly altered payment details (e.g., a different bank account number).
- Lack of contact information or generic email addresses.
3. Phishing Emails: Exploiting Post-Holiday Inattention
Scammers frequently use phishing emails to harvest sensitive company information. After the holidays, employees may be less vigilant or overwhelmed with catching up on work, making them more likely to click on a link or open an attachment in an unsolicited email.
For example, a Brisbane-based accounting firm recently reported an incident where an employee received an email that appeared to come from a high-level executive, requesting a transfer of funds to a new account due to “an urgent supplier payment.” The email included a link to what seemed like the company’s internal payment system, but it led to a fake website designed to collect login credentials.
Warning signs of phishing emails:
- Emails asking for sensitive information, such as login credentials or financial details.
- Generic greetings like “Dear Customer” rather than addressing the recipient by name.
- Suspicious links or attachments from unfamiliar sources.
4. Holiday Delivery Scams: Fake Packages and Deliveries
After the holiday season, many businesses receive a flurry of package deliveries. Scammers use this as an opportunity to pose as delivery services, claiming a missed package or requiring payment to release the parcel. In one case, a Perth-based business received an email from a “delivery company” asking for payment to release a supposed “missed shipment”—a scam designed to capture credit card details.
How to avoid falling for delivery scams:
- Always verify delivery notices through the official courier service or tracking system.
- Be cautious of emails from unfamiliar delivery companies.
- Never click on links in unsolicited messages related to deliveries.
Protecting Your Business
The beginning of the year is a critical time for businesses to review their security protocols. Here are a few strategies to safeguard your office from scams:
- Training: Regularly educate employees on how to spot scams and how to respond.
- Verification: Always verify unusual requests—especially those involving money, gift cards, or sensitive data.
- Multi-Factor Authentication: Implement MFA across your systems to make it harder for attackers to compromise accounts.
- Clear Policies: Have clear policies on how bonuses and transactions are processed to prevent confusion and opportunistic scams.
By being proactive, businesses can minimise the risk of falling victim to scams as employees return to the office and start the new year. Vigilance is key to spotting the warning signs early and protecting your business from significant financial loss.
