Weren't expecting an email from the big boss? Maybe double check before you click on any links or hit send on a company bank transfer.
Hackers are increasingly tricking businesses into paying large sums of money by pretending to be company executives on emails, causing a strain on cashflows particularly for small to medium size enterprises (SMEs), an Australian cyber insurance provider warns.
Dubbed "social engineering fraud", the attack stems from criminals pretending to be customers, suppliers or senior individuals within a company to manipulate staff into transferring sums of cash into the attackers' bank accounts.
The type of fraud has increased more than 200 per cent over 2016 to 2017, reports to the Australian Cybercrime Online Reporting Network (ACORN) show.
Specialist insurer Edmund, which offers cyber insurance to SMEs, says most companies are not insured for this type of fraud because it typically comes under crime cover.
News that makes sense
Your trusted source for staying up-to-date with the world around you. Get free daily news updates and analysis, straight to your inbox.
As a result, companies do not recover their stolen goods, co-founder Richard Smith says.
"There are a number of security measures businesses should have in place to protect themselves," he said.
Edmund, which this week launched its online platform, has built an extension of cover to ensure companies attacked by social engineering fraud are insured.
At least 34,000 Australians were affected by 63 data breaches since it became mandatory in late February for most organisations to inform the privacy watchdog about breaches that could likely result in serious harm.
That compares to just 114 breaches reported in the year to June 2017 under the old, voluntary scheme.
Fellow co-founder Christopher Lynam said Facebook's mishandling of data, which improperly ended up on the servers of Cambridge Analytica, is an example of how a fast response from an insurer is crucial in minimising profit loss and upholding a company's reputation.
"Reputation is key," he said.
"It is evidence by our friend (Mark) Zuckerberg having to stand up in front of congress for two days, just how data - and the protection of it- has become core to society's values."
