Scam Messages
Does your business know how to spot a scam message? In this guide we show you how to stay safe from scam emails and text messages.
How scam messages work
Fraudsters can use emails and texts to try to scam your business. They can break into accounts to send messages that pretend to be someone you know, like a supplier.
A scam message can appear alongside other texts or emails from an earlier chain of messages. And fraudsters can also change payment details of an invoice that’s attached to a message.
They use all kinds of tricks to get you to click on something or reply. Their goal is to steal banking details or money.
We’ll never message to ask you to move money to another account or for your banking details. And our messages will never include a link for you to login or provide details.
Genuine companies and people don’t get in touch out of the blue to ask for money or banking details. Even if you know the sender of a message make sure it’s genuine before you do anything else.
-
A mobile phone and email account should have SPAM filters to help your business avoid scam messages. But some could get through.
When you’re not sure that a message is genuine, there are a couple of things you can do to check:
- Call the sender - Use a number you trust, not one from a message.
- Look at the address or number - Make sure the sender’s details are correct. Fraudsters often alter genuine email addresses or use new telephone numbers.
Even when an address seems genuine, if the message is about money you should talk to the sender. Use a number you trust, not one from a message.
If you’re not sure a message is genuine, don’t reply or click on any links. Just delete it. A genuine sender will try to talk to you in person.
Next, we’ll tell you about the main threats from scam messages and how to avoid them.
-
Invoice scam - confirm payment details
Fraudsters can copy a genuine email or hack into an account to send new payment details.
If a company or person you deal with changes their payment details, call them back to double-check. Use a number you trust, not one from an email or invoice.
Find out more on our invoice scams page
Big boss scam - double-check the sender
This scam pretends to be someone from your business who sends a message for an urgent payment or transfer of money.
If you get a message like this, call the sender in person to make sure it’s real. Use a number you trust and not one from a message.
Computer virus - download with care
A scam message can hide a virus in an attachment, link or file download. This can infect your computer to steal banking and other details.
Only click on links or download a file if you know and trust the sender.
Links to fake sites - click with care
Some scam messages use a link that takes you to a fake site. The site then tries to get banking or business details.
Only click on a link if you know and trust the sender.
If you visit our site and it looks odd in any way, don’t login or key in a code from your card or reader. It could be a fake site or your device may have a virus.
Contact us right away if you notice anything wrong with our site.
-
Bank of Scotland will never ask you to:
- Share account details like user ID, password and memorable information.
- Tell us the security number for Telephone Banking.
- Tell us the PIN code or expiry date of your business bank card.
- Move money to another account.