Reviewing banking access for finance teams
A recurring access review for users, roles, old employees and approval rights.
Business banking security and controls
Fraud prevention, payment approval, account access, card security and operational resilience.
Security & controlsFraud prevention, approvals and resilience
01Reviewing banking access for finance teamsA recurring access review for users, roles, old employees and approval rights.02Business bank account takeoverReducing the risk that compromised credentials or devices lead to unauthorised banking access.03Authorised push payment scams and businessesHow businesses can strengthen verification before sending money to a fraudster-controlled account.
Featured security researchStart with access and approvals
Business bank account takeover
Reducing the risk that compromised credentials or devices lead to unauthorised banking access.
Authorised push payment scams and businesses
How businesses can strengthen verification before sending money to a fraudster-controlled account.
Supplier bank-detail change procedure
A simple control for validating bank-detail changes before payment instructions are updated.
Banking access recovery and resilience
Preparing for lost devices, locked accounts, staff absence and other access failures.
More security research
Beneficiary-change and invoice-redirection fraud
A payment-control framework for supplier bank-detail changes.
Reviewing business banking audit logs
A practical UK business guide to reviewing business banking audit logs, covering fraud prevention, access control, verification, monitoring and incident response.
Using banking audit logs and payment histories
A practical UK business guide to using banking audit logs and payment histories, covering fraud prevention, access control, verification and incident response.
Browser security for online business banking
A practical UK business guide to browser security for online business banking, with a focus on fraud prevention, access control, verification and incident response.
CEO fraud and urgent-payment scams
A practical UK business guide to ceo fraud and urgent-payment scams, with a focus on fraud prevention, access control, verification and incident response.
Deepfake and impersonation fraud in business payments
A practical UK business guide to deepfake and impersonation fraud in business payments, with a focus on fraud prevention, access control, verification and incident response.
Device management for business banking
A practical UK business guide to device management for business banking, with a focus on fraud prevention, access control, verification and incident response.
Device security for business banking
A practical baseline for phones and computers used to access accounts and payment systems.
Director impersonation fraud controls
A practical UK business guide to director impersonation fraud controls, covering fraud prevention, access control, verification, monitoring and incident response.
Dual approval for business payments
A practical UK business guide to dual approval for business payments, with a focus on fraud prevention, access control, verification and incident response.
Business email compromise and banking fraud
A practical UK business guide to business email compromise and banking fraud, covering fraud prevention, access control, verification and incident response.
Emergency lockdown steps after suspected account compromise
A practical UK business guide to emergency lockdown steps after suspected account compromise, covering fraud prevention, access control, verification, monitoring and incident response.
Controls for spotting fake and altered supplier invoices
A practical UK business guide to controls for spotting fake and altered supplier invoices, covering fraud prevention, access control, verification, monitoring and incident response.
Records to keep after suspected business payment fraud
A practical UK business guide to records to keep after suspected business payment fraud, covering fraud prevention, access control, verification, monitoring and incident response.
Invoice fraud and business banking controls
A practical UK business guide to invoice fraud and business banking controls, with a focus on fraud prevention, access control, verification and incident response.
Extra checks for large business payments
A practical UK business guide to extra checks for large business payments, covering fraud prevention, access control, verification and incident response.
What to do if a business banking phone is lost
A practical UK business guide to what to do if a business banking phone is lost, covering fraud prevention, access control, verification and incident response.
Mailbox security for business payment teams
A practical UK business guide to mailbox security for business payment teams, covering fraud prevention, access control, verification, monitoring and incident response.
Malware risks in business online banking
A practical UK business guide to malware risks in business online banking, with a focus on fraud prevention, access control, verification and incident response.
Creating a multi-factor authentication policy for business banking
A practical UK business guide to creating a multi-factor authentication policy for business banking, covering fraud prevention, access control, verification, monitoring and incident response.
Multi-factor authentication for business banking
A practical UK business guide to multi-factor authentication for business banking, covering fraud prevention, access control, verification and incident response.
Controls for new devices accessing business banking
A practical UK business guide to controls for new devices accessing business banking, covering fraud prevention, access control, verification, monitoring and incident response.
Checks before adding a new payment beneficiary
A practical UK business guide to checks before adding a new payment beneficiary, covering fraud prevention, access control, verification and incident response.
Using a password manager for business banking access
A practical UK business guide to using a password manager for business banking access, covering fraud prevention, access control, verification, monitoring and incident response.
Password policy for business banking access
A practical UK business guide to password policy for business banking access, covering fraud prevention, access control, verification and incident response.
Payment verification calls and callback procedures
A practical UK business guide to payment verification calls and callback procedures, covering fraud prevention, access control, verification, monitoring and incident response.
Business banking phishing: practical controls
How to reduce risk from fake login pages, urgent messages and credential theft.
Building resilience into business banking
Why a second payment route, documented access and strong controls can matter more than chasing one perfect provider.
How to run a business banking security review
A practical UK business guide to how to run a business banking security review, with a focus on fraud prevention, access control, verification and incident response.
Business banking security for small teams
A practical security baseline for online banking, cards, devices and payment approvals.
Why shared business banking logins create risk
A practical UK business guide to why shared business banking logins create risk, covering fraud prevention, access control, verification and incident response.
SIM-swap risk and business banking
A practical UK business guide to sim-swap risk and business banking, covering fraud prevention, access control, verification and incident response.
Smishing and text-message banking scams
A practical UK business guide to smishing and text-message banking scams, with a focus on fraud prevention, access control, verification and incident response.
Verifying supplier bank detail changes
A practical UK business guide to verifying supplier bank detail changes, covering fraud prevention, access control, verification, monitoring and incident response.
Verifying suppliers before making payment
A practical UK business guide to verifying suppliers before making payment, covering fraud prevention, access control, verification and incident response.
Quarterly user access reviews for business banking
A practical UK business guide to quarterly user access reviews for business banking, covering fraud prevention, access control, verification, monitoring and incident response.
Removing banking access when staff leave
A practical UK business guide to removing banking access when staff leave, covering fraud prevention, access control, verification and incident response.
Vishing and phone scams targeting businesses
A practical UK business guide to vishing and phone scams targeting businesses, with a focus on fraud prevention, access control, verification and incident response.
Business payment fraud
Controls for unusual payment requests, new beneficiaries and high-value transfers.
CEO fraud and urgent payment requests
How impersonation and authority pressure can bypass normal controls and what process should stop it.
Internal payment-fraud controls
Designing roles and approvals to reduce opportunity for unauthorised employee payments.
Business banking fraud response checklist
Immediate operational steps when a company suspects an unauthorised payment or compromised account.
Invoice redirection fraud controls
How businesses can verify changed supplier details before money is sent to a fraudulent account.
Payment approvals and dual control
Why approval workflows matter as payment values rise and finance teams grow.
Setting payment approval thresholds
How approval levels can reflect payment size, beneficiary risk and staff responsibility.