Find your course
Menu

Course sources and how we build it.

Every fact with a number or a rule comes from a public document we have stored with its date and digital fingerprint. The test questions are our own.

How we build the course

  1. We read the originals: the Law Society of New South Wales’s CPD pages and guide, its trust money pages and alerts, the Australian Cyber Security Centre’s alert and the national electronic conveyancing model rules, not other people’s summaries.
  2. We keep a copy of each document, with the date and its SHA-256 fingerprint, so we can show what it said.
  3. Every fact carries a word-for-word phrase. An automatic check confirms the phrase is in the stored copy; if it is not, the site is not published.
  4. The questions are ours. We do not copy questions from any exam or course. The scam examples use invented names and web addresses.
  5. Reading times are counted from the real text of each lesson, at 200 words a minute.
  6. Written with AI, checked against the sources: we draft with AI from the sources above, and every fact passes the word-for-word check. If you spot a mistake, email hello@aptiaskills.com and we will fix it.

How the 2 CPD units are counted

The units come from the content, not from how long you take. Reading is 58 minutes (11,726 words at 200 words a minute, rounded down). The 39 review questions and 25 test questions in one sitting count 1 minute each (64 minutes). The total is 122 minutes, rounded down to the whole hour. Reading is about 48% of that total.

The certificate also prints the study time your own browser measured. These are our figures, not the Law Society’s: you decide how to record the activity, using the rules below.

What the Law Society says about CPD, and what this course is

We are a private training provider, not a public body. This course is free to study, with an optional certificate of completion. We cannot promise that any activity counts for your CPD: the Law Society leaves the assessment to each solicitor.

What each lesson draws on

This table is part of the training record that comes with each certificate.

Lessons, their reading time and the bodies whose sources they cite
LessonReadingSources from
1. What the NSW CPD rules ask, and where this course fits4 minLaw Society
2. Payment redirection: when the client’s bank details change4 minACSC, Law Society
3. Trust money duties when something looks wrong3 minLaw Society
4. Impersonation: banks, clients and cloned voices3 minLaw Society
5. Identity, documents and fake clients4 minACSC, ARNECC, Law Society
6. Four files to practise on4 minACSC, Law Society
7. Payment redirection and business email compromise6 minACCC, ACSC, FBI Internet Crime Compl, INCIBE, Scamwatch
8. AI-written phishing and impersonation by email, SMS and chat7 minACCC, ACSC, Banco de la Nación del P, Europol, FBI Internet Crime Compl, Scamwatch, US Federal Trade Commiss
9. Verification habits that stop most of these scams6 minACSC, Comisión Federal de Come, FBI Internet Crime Compl, INCIBE, Scamwatch, US Federal Trade Commiss
10. Account takeover, passwords and MFA fatigue6 minACSC, FBI Internet Crime Compl, Scamwatch, US Cybersecurity and Inf
11. Synthetic identities and fake documents6 minEuropol, Europol Innovation Lab, FBI Internet Crime Compl, INCIBE, Ministerio Público Fisca, Ministerio de Justicia y, Scamwatch, US Treasury
12. Voice clones and deepfake video calls: an emerging risk7 minACSC, Europol Innovation Lab, FBI Internet Crime Compl, INCIBE, Ministerio de Justicia y, Scamwatch, US Federal Trade Commiss, US Treasury
13. When it happens: the first hour5 minACSC, Banco de la Nación del P, FBI Internet Crime Compl, INCIBE, Scamwatch

Sources

Checked on 2026-11-02. Names of public bodies appear here only as plain text, to say where a fact comes from.

  1. [S1] Continuing professional development (solicitors). The Law Society of New South Wales. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 27713db2af254475…
    https://www.lawsociety.com.au/practising-law-in-NSW/working-solicitor-NSW/your-practising-certificate/Continuing-professional-development
  2. [S2] CPD Comprehensive Guide (LS1325, 25 June 2021). The Law Society of New South Wales. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: a1058552e79cc469…
    https://www.lawsociety.com.au/sites/default/files/2021-06/LS1325_REG_CPD_ComprehensiveGuide_2021-06-25.pdf
  3. [S5] Scam alerts (trust money and fidelity fund). The Law Society of New South Wales. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: ab8d8d9d7caeb571…
    https://www.lawsociety.com.au/practising-law-in-NSW/trust-money-and-fidelity-fund/scam-alerts
  4. [S6] Trust account irregularity reporting. The Law Society of New South Wales. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 9d06a8b7ad5d0f1a…
    https://www.lawsociety.com.au/practising-law-nsw/trust-money-and-fidelity-fund/trust-account-irregularity-reporting
  5. [S7] Property-related business email compromise scams rising in Australia. Australian Signals Directorate, Australian Cyber Security Centre (cyber.gov.au). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 52bd34c785504904…
    https://www.cyber.gov.au/about-us/alerts/property-related-business-email-compromise-scams-rising-australia
  6. [S8] Increase in impersonation scams in law practice bank accounts (Monday Briefs). The Law Society of New South Wales. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 317886d2662cdb26…
    https://pages.lawsociety.com.au/NL-2024-12-02-2340-Monday-Briefs_Increase-in-Impersonation-Scams-in-Law-Practice-Bank-Accounts.html
  7. [S9] Scam alert: the latest stats and trends (Law Society Journal, 28 August 2023). The Law Society of New South Wales (Law Society Journal). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 1b5504be216817f1…
    https://lsj.com.au/articles/scam-alert-the-latest-stats-and-trends/
  8. [S10] Model Participation Rules, version 7 (January 2024). Australian Registrars National Electronic Conveyancing Council (ARNECC). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 5e428a43d8ab69e3…
    https://www.arnecc.gov.au/wp-content/uploads/2024/01/Model-Participation-Rules-Version-7-Clean.pdf
  9. [S90] Repair, replace, refund, cancel. Australian Competition and Consumer Commission (ACCC). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: e9febf1e97037c38…
    https://www.accc.gov.au/consumers/problem-with-a-product-or-service-you-bought/repair-replace-refund-cancel
  10. [S91] Small business and the Privacy Act. Office of the Australian Information Commissioner (OAIC). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: a894fa61856a1cce…
    https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/organisations/small-business
  11. [KS1] Targeting scams: report of the National Anti-Scam Centre on scams data and activity 2025 (March 2026). National Anti-Scam Centre, Australian Competition and Consumer Commission. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 9d21086dedca93f0…
    https://www.scamwatch.gov.au/system/files/targeting-scams-report-2025.pdf
  12. [KS2] Phishing scams. Scamwatch (Australian Competition and Consumer Commission). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: fd34428361dd1f71…
    https://www.scamwatch.gov.au/types-of-scams/phishing
  13. [KS3] Account or identity takeover scams. Scamwatch (Australian Competition and Consumer Commission). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: ce0bdeb5f2e0d31b…
    https://www.scamwatch.gov.au/types-of-scams/remote-access-scams
  14. [KS4] Protect your small business from invoice email scams (16 Aug 2016). Scamwatch (Australian Competition and Consumer Commission). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 52ed3a5a4ee2b19a…
    https://www.scamwatch.gov.au/about-us/news-and-alerts/protect-your-small-business-from-invoice-email-scams
  15. [KS6] False billing: John updated supplier details and it ended up costing thousands. Scamwatch (Australian Competition and Consumer Commission). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 8690814edb65f0a1…
    https://www.scamwatch.gov.au/stop-check-protect/real-life-stories/false-billing-john-updated-supplier-details-and-it-ended-up-costing-thousands
  16. [KS7] How scammers use technology and AI. Scamwatch (Australian Competition and Consumer Commission). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: a5312102ac849c8f…
    https://www.scamwatch.gov.au/stop-check-protect/help-to-spot-and-avoid-scams/how-scammers-use-technology-and-ai
  17. [KS8] Recover from business email compromise (8 Sep 2026). Australian Signals Directorate, cyber.gov.au. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: ec3d93b13ef375f6…
    https://www.cyber.gov.au/guidance/recover-from-business-email-compromise
  18. [KS9] Protecting against business email compromise. Australian Signals Directorate, cyber.gov.au. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 6f0de95cdcce305b…
    https://www.cyber.gov.au/business-government/protecting-devices-systems/hardening-systems-applications/email-hardening/protecting-against-business-email-compromise
  19. [KS10] Learn about account compromise. Australian Signals Directorate, cyber.gov.au. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 7b35d9b14725d7aa…
    https://www.cyber.gov.au/guidance/learn-about-account-compromise
  20. [KS11] Learn about phishing scams. Australian Signals Directorate, cyber.gov.au. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: cd2a70740cbbda07…
    https://www.cyber.gov.au/guidance/learn-about-phishing-scams
  21. [KS13] Scattered Spider advisory. Australian Signals Directorate, cyber.gov.au (reproducing a joint advisory). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 2e388db94d443aff…
    https://www.cyber.gov.au/advisory/scattered-spider
  22. [KS14] Criminals Use Generative Artificial Intelligence to Facilitate Financial Fraud (I-120324-PSA, 3 Dec 2024). FBI Internet Crime Complaint Center (IC3). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 5f652fda93b8482a…
    https://www.ic3.gov/PSA/2024/PSA241203
  23. [KS15] Senior US Officials Impersonated in Malicious Messaging Campaign (public service announcement, 15 May 2025). FBI Internet Crime Complaint Center (IC3). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: d7af19215c731bc5…
    https://www.ic3.gov/PSA/2025/PSA250515
  24. [KS16] 2025 IC3 Annual Report. FBI Internet Crime Complaint Center (IC3). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 7d1fe453237654d2…
    https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf
  25. [KS17] FBI Warns of Scammers Impersonating the IC3 (I-072026-PSA, 20 Jul 2026). FBI Internet Crime Complaint Center (IC3). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: e352c731551538d4…
    https://www.ic3.gov/PSA/2026/PSA260720
  26. [KS18] Senior US Officials Continue to be Impersonated in Malicious Messaging Campaign (I-121925-PSA, 19 Dec 2025). FBI Internet Crime Complaint Center (IC3). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 2009970fa1c67fe0…
    https://www.ic3.gov/PSA/2025/PSA251219
  27. [KS19] How To Avoid a Scam. US Federal Trade Commission, Consumer Advice. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: eb66f787ba27f9cd…
    https://consumer.ftc.gov/articles/how-avoid-scam
  28. [KS21] Scammers use AI to enhance their family emergency schemes (March 2023). US Federal Trade Commission, Consumer Advice. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 53ae7928777dcecd…
    https://consumer.ftc.gov/consumer-alerts/2023/03/scammers-use-ai-enhance-their-family-emergency-schemes
  29. [KS22] Fighting back against harmful voice cloning (April 2024). US Federal Trade Commission, Consumer Advice. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 2a030317d1640a8f…
    https://consumer.ftc.gov/consumer-alerts/2024/04/fighting-back-against-harmful-voice-cloning
  30. [KS23] How To Avoid Imposter Scams. US Federal Trade Commission, Consumer Advice. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 783f3c028eded810…
    https://consumer.ftc.gov/features/how-avoid-imposter-scams
  31. [KS24] Phishing attacks: defending your organisation. UK National Cyber Security Centre. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 9ab741811dfdec48…
    https://www.ncsc.gov.uk/guidance/phishing
  32. [KS25] Phishing scams: how to spot and report them. UK National Cyber Security Centre. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: d82fb6ea424f5759…
    https://www.ncsc.gov.uk/guidance/suspicious-email-actions
  33. [KS27] The near-term impact of AI on the cyber threat. UK National Cyber Security Centre (NCSC Assessment). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: da8e2361bf216f78…
    https://www.ncsc.gov.uk/report/impact-of-ai-on-cyber-threat
  34. [KS28] Steal, deal and repeat: how cybercriminals trade and exploit your data (IOCTA 2025). Europol. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 8feae25dde74a8f2…
    https://www.europol.europa.eu/cms/sites/default/files/documents/Steal-deal-repeat-IOCTA_2025.pdf
  35. [KS30] Facing reality? Law enforcement and the challenge of deepfakes. Europol Innovation Lab. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 1e48071951f58c63…
    https://www.europol.europa.eu/cms/sites/default/files/documents/Europol_Innovation_Lab_Facing_Reality_Law_Enforcement_And_The_Challenge_Of_Deepfakes.pdf
  36. [KS31] FinCEN Alert FIN-2024-Alert004: Fraud Schemes Involving Deepfake Media Targeting Financial Institutions (13 Nov 2024). US Treasury, Financial Crimes Enforcement Network (FinCEN). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 5e02f6647ee023ff…
    https://www.fincen.gov/system/files/shared/FinCEN-Alert-DeepFakes-Alert508FINAL.pdf
  37. [KS32] Implementing Phishing-Resistant MFA (fact sheet, October 2022). US Cybersecurity and Infrastructure Security Agency (CISA). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 0f8fff1a8208b305…
    https://www.cisa.gov/sites/default/files/publications/fact-sheet-implementing-phishing-resistant-mfa-508c.pdf
  38. [KS33] Implementing Number Matching in MFA Applications (fact sheet, October 2022). US Cybersecurity and Infrastructure Security Agency (CISA). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 0b752a0400d4ff03…
    https://www.cisa.gov/sites/default/files/publications/fact-sheet-implement-number-matching-in-mfa-applications-508c.pdf
  39. [KS34] Fraude del CEO: el engaño que puede vaciar la cuenta de tu pyme (page in Spanish). INCIBE (Instituto Nacional de Ciberseguridad de España). Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: c3977d5f89991274…
    https://www.incibe.es/empresas/blog/fraude-del-ceo-el-engano-que-puede-vaciar-la-cuenta-de-tu-pyme
  40. [KS35] Suplantación del CEO utilizando la técnica de inteligencia artificial deepvoice (page in Spanish). INCIBE, línea de ayuda en ciberseguridad: casos reales. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 3ba736a024d2e3fe…
    https://www.incibe.es/linea-de-ayuda-en-ciberseguridad/casos-reales/suplantacion-del-ceo-utilizando-la-tecnica-de-inteligencia-artificial-deepvoice
  41. [KS36] Una empresa sufre una estafa millonaria al suplantar al CEO vía Teams (page in Spanish). INCIBE, línea de ayuda en ciberseguridad: casos reales. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 1cbfb18fb417f1d4…
    https://www.incibe.es/linea-de-ayuda-en-ciberseguridad/casos-reales/una-empresa-sufre-una-estafa-millonaria-al-suplantar-al-ceo-teams
  42. [KS38] Deepfake (Explorador INCIBE) (page in Spanish). INCIBE. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 93ca5da41381afc1…
    https://www.incibe.es/exploradorincibe/deepfake
  43. [KS39] ¿Qué es el voice hacking? (page in Spanish). INCIBE, blog para la ciudadanía. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 4cd1c2d5e14e6fdb…
    https://www.incibe.es/ciudadania/blog/que-es-el-voice-hacking
  44. [KS40] Cómo evitar una estafa (page in Spanish). Comisión Federal de Comercio de Estados Unidos (FTC), Consumidor. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: d9fc7ce2c9f324c5…
    https://consumidor.ftc.gov/articulos/como-evitar-una-estafa
  45. [KS42] Autoridad Nacional de Protección de Datos Personales brinda recomendaciones ante nueva modalidad de estafa por clonación de voz (page in Spanish). Ministerio de Justicia y Derechos Humanos del Perú, en gob.pe. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: c92ce49edb198cf6…
    https://www.gob.pe/institucion/minjus/noticias/805436-autoridad-nacional-de-proteccion-de-datos-personales-brinda-recomendaciones-ante-nueva-modalidad-de-estafa-por-clonacion-de-voz
  46. [KS43] Una llamada de tu Banco, podría no serlo: spoofing telefónico (page in Spanish). Banco de la Nación del Perú, en gob.pe. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 1cc4ae2cf8f2bb09…
    https://www.gob.pe/institucion/bn/noticias/821482-una-llamada-de-tu-banco-podria-no-serlo-spoofing-telefonico-suplantacion-de-numero-telefonico
  47. [KS44] ¡Cuidado con la suplantación de identidad! Recomendaciones para proteger tu información personal (page in Spanish). Ministerio de Justicia y Derechos Humanos del Perú, en gob.pe. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: 5e4176179ac7d182…
    https://www.gob.pe/institucion/minjus/noticias/1163916-cuidado-con-la-suplantacion-de-identidad-minjusdh-te-brinda-recomendaciones-para-proteger-tu-informacion-personal
  48. [KS45] Suplantación de identidad: orientación (page in Spanish). Ministerio Público Fiscalía de la Nación del Perú, en gob.pe. Checked on 2026-11-02. SHA-256 fingerprint of our stored copy: b497fd983a29bf0f…
    https://www.gob.pe/25712-suplantacion-de-identidad