Phishing, Payment Fraud, and Business Email Compromise
Help employees stop the messages, calls, texts, and invoice changes that lead to stolen credentials and fraudulent payments. 30 minutes, built for finance, HR, executives, AP/AR, and all staff — with real-world scenarios across email, QR codes, voice calls, and collaboration tools.
What you'll learn
- Recognize modern phishing across email, text messages, QR codes, voice calls, and collaboration tools, and know the three outcomes attackers are driving toward.
- Spot business email compromise (BEC) and executive impersonation attempts, including the gift-card, wire, W-2, and signature-request variants.
- Verify every unusual payment detail change or vendor bank update through an independent channel — using a phone number you already had on file, not one provided in the request.
- Identify payroll diversion, W-2 phishing, benefits-enrollment phishing, and other HR-targeted social-engineering patterns before they succeed.
- Protect credentials and refuse unsolicited MFA push prompts; recognize fake sign-in pages and malicious OAuth consent requests.
- Apply the 'verify in a different channel than the request arrived in' principle to every message that asks you to move money, change payment details, or share sensitive data.
- Report suspicious activity promptly — even when you already clicked, approved, or shared — through your organization's established channel, without fear of blame.
Requirements
- A workstation, laptop, tablet, or phone with a modern browser.
- Audio or captions enabled so you can follow the narrated video for each module.
- No prior cybersecurity knowledge required — this course works for staff at every level and is especially useful for finance, HR, executive, AP/AR, and procurement teams.
Course content
7 chapters · 6 lectures · 29m total
Module 1 — How Modern Phishing Works
What phishing really looks like in 2026 — not clumsy emails but polished messages that arrive through every channel you use. The three outcomes attackers are driving toward and the pressure levers they rely on.
1 item
Module 1 — How Modern Phishing Works
What phishing really looks like in 2026 — not clumsy emails but polished messages that arrive through every channel you use. The three outcomes attackers are driving toward and the pressure levers they rely on.
-
How Modern Phishing Works Free preview4 minutes 30 seconds
Module 2 — Email and QR-Code Traps
What phishing emails actually look like today — lookalike domains, display-name spoofing, QR codes delivered as PDFs, and the fake sign-in pages behind them. How to inspect links and senders before you click.
1 item
Module 2 — Email and QR-Code Traps
What phishing emails actually look like today — lookalike domains, display-name spoofing, QR codes delivered as PDFs, and the fake sign-in pages behind them. How to inspect links and senders before you click.
-
Email and QR-Code Traps5 minutes
Module 3 — BEC and Executive Impersonation
Business email compromise in its most common forms — the gift-card scam, the late-Friday wire request, the W-2 ask from the CEO, the signature-request lure. Why these work and how to shut them down in thirty seconds.
1 item
Module 3 — BEC and Executive Impersonation
Business email compromise in its most common forms — the gift-card scam, the late-Friday wire request, the W-2 ask from the CEO, the signature-request lure. Why these work and how to shut them down in thirty seconds.
-
BEC and Executive Impersonation5 minutes
Module 4 — Invoice and Vendor-Change Fraud
How attackers watch invoice cycles for weeks before striking — the vendor bank-account change, the real-estate closing-day wire swap, and the fake-invoice email. The specific callback verification rules every AP/AR team needs.
1 item
Module 4 — Invoice and Vendor-Change Fraud
How attackers watch invoice cycles for weeks before striking — the vendor bank-account change, the real-estate closing-day wire swap, and the fake-invoice email. The specific callback verification rules every AP/AR team needs.
-
Invoice and Vendor-Change Fraud5 minutes
Module 5 — Payroll and HR Scams
The HR-focused social-engineering patterns — payroll diversion, W-2 phishing, benefits-enrollment fraud, and the fake-employee direct-deposit change. What a real request looks like and what to require before any change.
1 item
Module 5 — Payroll and HR Scams
The HR-focused social-engineering patterns — payroll diversion, W-2 phishing, benefits-enrollment fraud, and the fake-employee direct-deposit change. What a real request looks like and what to require before any change.
-
Payroll and HR Scams5 minutes
Module 6 — Verify and Report
The two habits that stop almost every attack in this course — out-of-band verification before you act, and immediate honest reporting after you notice. Why channel matters and why speed matters more than perfection.
1 item
Module 6 — Verify and Report
The two habits that stop almost every attack in this course — out-of-band verification before you act, and immediate honest reporting after you notice. Why channel matters and why speed matters more than perfection.
-
Verify and Report4 minutes 30 seconds
Final Assessment
A 12-question scenario-based quiz covering all six modules. You need 80% or higher to pass and earn your completion certificate. You may retake the assessment as many times as needed.
1 item
Final Assessment
A 12-question scenario-based quiz covering all six modules. You need 80% or higher to pass and earn your completion certificate. You may retake the assessment as many times as needed.
-
Final Assessment — Phishing, Payment Fraud, and BEC