February is when the year genuinely starts for most small businesses. The school holidays are over, everyone’s back at work, inboxes are full again, and payments start flowing at a normal pace. It’s a natural reset point — and also the moment when fraud attempts quietly ramp up. Not because businesses are doing anything wrong, but because this is when routines are still forming and workloads are high.
This isn’t a scare piece. It’s a practical look at what’s happening in 2026 and the simple habits that keep businesses safe.
The fraud patterns appearing most often this year
- Invoice redirection inside real email threads — Attackers gain access to a supplier’s inbox and wait for the perfect moment to send “updated bank details.” The email is legitimate, which is why it works.
- AI‑generated voice calls — Voice cloning makes it easy to mimic a business owner, manager, or supplier. These calls usually ask for urgent transfers or bank‑detail changes.
- Fake supplier onboarding forms — Professional‑looking PDFs or online forms request ABNs, bank details, and contact information. Once completed, scammers use the data to redirect payments.
- Payroll bank‑detail scams — Criminals impersonate employees and request bank‑detail changes before the next pay run. These often come from lookalike email addresses or compromised accounts.
- Hidden mailbox rules — Attackers set up forwarding or deletion rules inside email accounts so replies disappear, keeping the fraud hidden longer.
- Spoofed banking alerts — SMS or email notifications claiming a payment failed or needs verification, designed to steal login credentials.
These tactics rely on timing and trust, not technical mistakes.
Why February is a high‑risk month
- Payment routines restart after the holiday slowdown
- Staff are catching up on full inboxes
- Supplier activity increases
- Payroll changes are common early in the year
- Many businesses still rely on trust‑based processes
It’s a busy period, and fraudsters take advantage of that pace.
A simple workflow that prevents most fraud
- Verify all bank‑detail changes by phone using a number you already trust.
- Use two‑person approval for payments above a set threshold.
- Enable MFA on all email accounts — still the most effective defence.
- Check ABN and bank details against previous invoices.
- Confirm payroll bank‑detail changes verbally with employees.
- Restrict who can update supplier records in accounting software.
- Review email rules monthly to catch hidden forwarding or deletion rules.
These steps don’t require new software or major changes — just a bit of structure.
Fraud prevention isn’t about being suspicious of everyone. It’s about having a workflow that protects the business even on the busiest days. February is the ideal time to reset those habits, because the year is only just settling into its rhythm.
If you’re unsure whether your current processes are strong enough, or you’d like a second set of eyes on your payment and payroll workflows, you’re welcome to get in touch. I can walk you through a practical review, highlight any gaps, and help you put simple, reliable safeguards in place so you can get on with running your business confidently.
Customised Accounting Matters 