Weekly Security Tip - CyberTip Tuesday — Don’t Let Social Engineers Slip Past Your Defenses

Headline: Guard against social engineering like a vigilant lifeguard on duty — always verify before you act.

Why it matters:

Social engineering is one of the most common causes of successful cyberattacks — because it targets people, not technology. Attackers pose as coworkers, vendors, or clients to trick you into sending money, sharing data, or granting access they should never have.

Financial firms are frequently targeted because a single fraudulent request can result in devastating financial loss and a Reg S-P violation. Urgency is the attacker’s favorite tactic: “This must be done now!”
When something feels rushed or unusual … it’s often a scam.

Staying alert and verifying requests protects your investors, your business, and your reputation.

Quick Tips

What You Should Do:

• Before responding to any sensitive or unusual request:

  • Require out-of-band verification. Confirm via a known phone number or video call, not email or text replies.

  • Slow down when urgency is applied. Attackers rely on panic — take a moment to check.

  • Double-check details. Sender identity, account numbers, and wording inconsistencies are common red flags.

Call to Action:

Take five minutes today to review your process for approving wire transfers, password resets, or access changes.
Ensure that dual verification is required — always.
A quick confirmation call can prevent a major security breach.