Training your employees against phishing and email fraud

Email fraud no longer targets only large companies. Quebec small businesses have become the preferred target, precisely because they have money to transfer and rarely anyone assigned to check. CEO fraud, a fake invoice from a supplier you know, a fake bank notice: these messages are well written, in French, and arrive at exactly the right moment.

This session requires no technical background. We look together at real fraudulent emails received by local businesses, take apart what makes them convincing, and establish the few reflexes that stop nearly all of them: check the sender's real address, distrust urgency, and confirm through a second channel before any transfer or change of banking details.

The second half is hands-on. Participants sort through a series of messages, real and fake, and explain their reasoning. That is where the reflex is built. We finish with your internal procedure: who to report a suspicious email to, and what to do in the first few minutes if somebody has already clicked.

With your agreement, I can follow the session with a simulated phishing test a few weeks later to measure what stuck. Results are reported in aggregate, never by name.