The phishing email that costs Bahamian businesses the most

Almost every serious loss we investigate starts the same way: a supplier's mailbox is compromised, an invoice is quietly edited, and payment goes to a new account. No malware, no alarms.

The defense is procedural before it is technical. Any change to banking details must be verified by phone using a number you already had on file, never a number in the email itself.

Technically, three controls stop most of these: multi-factor authentication on every mailbox, external-sender warning banners, and alerting on new mailbox forwarding rules.

If your tenant has never been audited for legacy authentication or stale forwarding rules, that is the first place we look during an assessment.