Monday, March 3, 2025
HomeComputer SecuritySmall Businesses are Cheated Over $7 Billion Every Year by Scammers

Small Businesses are Cheated Over $7 Billion Every Year by Scammers

Published on

SIEM as a Service

Follow Us on Google News

Small Business Organization is more susceptible to scams. According to the Better Business Bureau (BBB) report, 6 percent of small business lose money to the scams every year.

BBB research is based on the data collected from BBB Scam Tracker and from their Small Business Scams Survey. BBB report indicates the scam activity targeting small business is growing and it poses a significant risk.

The scams can target any organization regardless of location, size, industry, or length of time in business. Scammers continue to adapt with new techniques to trick user’s and make them fall as a victim.

Common Type of Business Scams

Spam click rates increased in 2018, so far 14.2 percent of spam that delivered in the inbox are clicked, whereas in 2017 the click rate is 13.4%.

Vanity Award – This scam involves organizations receiving an email claiming business or organization itself has won awards.

Tech support scams – They are very popular and the scammers pose to be from a popular rech support company and they try to steal money or gaining access to your computer.

Phishing – Trick employees to reveal the sensitive data such as login credentials, it often starts with an email or social media contact or through the call. To protect from phishing organization should consider multiple factors.

Bank/Credit Card Company Imposter – Scammers mimic that they are calling from bank or credit card company and fools victims to credit card or banking information.

Charity – Scammers use to say that they are calling from a famous charity and ask to ask to donate and then they disappear.

Fake Invoice – Scammers will send fake bills and service renewal notice to make the business pay for it.

Directory Listing – It is a technique used to fool victims of paying into a non-existent directory or a nonexistent advertising.

Government Imposter – Scammers threatening to be calling from government agencies and threatens business to pay taxes, bills or any other fees.

Fake Check – Scammers will offer to look legitimate fake check to deposit in the bank account and ask the business to transfer some money as a cash back via wire transfer. When the victim deposit checks in the bank they come to know it is the fake one and the scammers have the money.

Scammers generally reach out targets through phone, Email, IN Person, Postal mail, Website, text message, and Fax. Phone and Email are the most prominent methods. Mostly the scammers collect payments through check and credit card payment methods.

Overall, 13 percent of businesses responding to the survey indicated they had been harmed by a scam according to BB report. They always use to pretend to call from trusted sources and create urgency.

In a recent Tech Support Scam, attackers managed to implement call optimization service’s which allows attackers to display the correct phone number displayed to the user’s based in multiple countries.

Also Read

Spam Remains as the Popular Infection Method To Cyber Criminals For More than 40 Years

Proofpoint Q2 Threat Report – Ransomware Returns, Growth in Social Engineering and Email Fraud

List of Top Ten Dark Web Activities That Alerts Organizations a Possible Breach by Hackers

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Threat Actors Exploiting AES Encryption for Stealthy Payload Protection

Cybersecurity researchers have uncovered a surge in the use of Advanced Encryption Standard (AES)...

33.3 Million Cyber Attacks Targeted Mobile Devices in 2024 as Threats Surge

Kaspersky's latest report on mobile malware evolution in 2024 reveals a significant increase in...

Routers Under Attack as Scanning Attacks on IoT and Networks Surge to Record Highs

In a concerning trend, the frequency of scanning attacks targeting Internet of Things (IoT)...

Google Launches Shielded Email to Keep Your Address Hidden from Apps

Google is rolling out a new privacy-focused feature called Shielded Email, designed to prevent apps...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Is this Website Safe: How to Check Website Safety – 2025

is this website safe? In this digital world, Check a website is safe is...

Firefox 133.0 Released with Multiple Security Updates – What’s New!

Mozilla has officially launched Firefox 133.0, offering enhanced features, significant performance improvements, and critical...

Digital Wallets Bypassed To Allow Purchase With Stolen Cards

Digital wallets enable users to securely store their financial information on smart devices and...