Why Criminals Target People, Not Just Computers

You’ve probably already got the basics in place – strong passwords and two-step verification (2SV), for starters. You’re signed up to the South West Cyber Resilience Centre, after all. But here’s the bit many small businesses still underestimate: it’s not just your systems that criminals are going after. It’s you and your team.

And they’re not doing it by hacking in. They’re doing it by blending in.

Real Messages. Real Mistakes. Real Consequences.

Let’s talk about what this looks like in the real world – not theory.

A local construction firm recently lost thousands paying what they thought was a normal invoice from a regular supplier. Same style, same language, same branding – but the bank details had been quietly changed. It was only spotted after the money had gone.

One shop manager got a WhatsApp from “the owner” asking for gift cards. It sounded just like them – casual, friendly, even mentioning a recent event. They did what they thought was helpful. But it was a scam, and the codes were gone in minutes.

And a hospitality business we spoke to had their booking system locked after someone opened a fake form. Just one click, and they couldn’t access customer orders or payments for nearly a week.

It’s not carelessness. It’s busyness. Familiarity. Trust. The things that make us human.

You Are the First Line of Defence

You don’t need to be technical. But there are some basics that every business should have in place:

• Strong, unique passwords

• Two-step verification (2SV) on all important accounts – no exceptions

• A culture where people feel safe to say, “This looks a bit off – can we double-check?”

These scams work because they blend into everyday routines – and they rely on no one noticing. Slowing down and questioning what looks urgent can make all the difference.

Keep the Conversation Going

By reading this, you’re already doing something right. But it’s the next step that matters – sharing this awareness with your staff, your suppliers, even your mates who run their own business.

The more people expect these scams, the less power they have.

And if you haven’t already explored our free resources and bitesize training, they’re a great way to keep your team one step ahead – no jargon, no pressure, just practical advice.