The ATO has advised that cybercriminals are targeting small businesses with business email compromise scams under which fraudulent emails are sent posing as a legitimate business contact or staff member. Further, they typically request a change in bank account details for a deposit, wages or an invoice payment. Victims then unknowingly send money to the cybercriminal. The ATO says that small businesses  can protect themselves by taking a few simple steps: (a) verifying payment details by confirming the identity of anyone who requests changes to their information); (b) alerting staff and training employees to identify suspicious requests or emails that may link to fake websites built to capture passwords; and (c) securing email account by using multi-factor authentication or, if this is not possible, a strong unique passphrase that would be difficult to hack.