Sources.
Every rule in this kit comes from these official sources. We store a copy of each and check every quoted phrase against it.
- Protecting against business email compromise (guidance page; first published 23 Oct 2020, last reviewed 24 Mar 2023). Australian Signals Directorate, Australian Cyber Security Centre (cyber.gov.au). https://www.cyber.gov.au/publication/protecting-against-business-email-compromise (captured 2026-11-02, SHA-256 6f0de95cdcce…)
- Recover from business email compromise. Australian Signals Directorate, Australian Cyber Security Centre (cyber.gov.au). https://www.cyber.gov.au/guidance/recover-from-business-email-compromise (captured 2026-11-02, SHA-256 ec3d93b13ef3…)
- Recover from scams. Australian Signals Directorate, Australian Cyber Security Centre (cyber.gov.au). https://www.cyber.gov.au/guidance/recover-from-scams (captured 2026-11-02, SHA-256 9c6f0bbbfe0b…)
- Help during a cybercrime. Australian Signals Directorate, Australian Cyber Security Centre (cyber.gov.au). https://www.cyber.gov.au/guidance/help-during-a-cybercrime (captured 2026-11-02, SHA-256 1292cb4608a2…)
- Learn about phishing scams. Australian Signals Directorate, Australian Cyber Security Centre (cyber.gov.au). https://www.cyber.gov.au/guidance/learn-about-phishing-scams (captured 2026-11-02, SHA-256 cd2a70740cbb…)
- Small business cyber security handbook: Common cyber threats to small businesses. Australian Signals Directorate, Australian Cyber Security Centre (cyber.gov.au). https://www.cyber.gov.au/publication/small-business-cyber-security-handbook/common-cyber-threats-to-small-businesses (captured 2026-11-02, SHA-256 31beb8158fcc…)
- How scammers use technology and AI. Australian Competition and Consumer Commission, National Anti-Scam Centre (scamwatch.gov.au). https://www.scamwatch.gov.au/stop-check-protect/help-to-spot-and-avoid-scams/how-scammers-use-technology-and-ai (captured 2026-11-02, SHA-256 b1741006f858…)
- Protect your small business from scams. Australian Competition and Consumer Commission, National Anti-Scam Centre (scamwatch.gov.au). https://www.scamwatch.gov.au/stop-check-protect/protect-your-small-business-from-scams (captured 2026-11-02, SHA-256 fb6d96258083…)
- Small business scams: Scams impacting small business (guidance PDF). Australian Competition and Consumer Commission, National Anti-Scam Centre (scamwatch.gov.au). https://www.scamwatch.gov.au/system/files/small-business-scams-guidance_1.pdf (captured 2026-11-02, SHA-256 710845bf4ec7…)
- What to do if you’ve been scammed. Australian Competition and Consumer Commission, National Anti-Scam Centre (scamwatch.gov.au). https://www.scamwatch.gov.au/stop-check-protect/what-to-do-if-youve-been-scammed (captured 2026-11-02, SHA-256 0e7a9c6bf775…)
- Report a scam. Australian Competition and Consumer Commission, National Anti-Scam Centre (scamwatch.gov.au). https://www.scamwatch.gov.au/report-a-scam (captured 2026-11-02, SHA-256 c6cbc39d0184…)
- Business email compromise: our business lost $190 000 when our supplier’s email was hacked (scam victim story). Australian Competition and Consumer Commission, National Anti-Scam Centre (scamwatch.gov.au). https://www.scamwatch.gov.au/protect-yourself/real-life-stories/scam-victims-tell-us-their-stories/business-email-compromise-our-business-lost-190-000-when-our-suppliers-email-was-hacked (captured 2026-11-02, SHA-256 8621ac326fef…)
- False billing: John updated supplier details and it ended up costing thousands (scam victim story). Australian Competition and Consumer Commission, National Anti-Scam Centre (scamwatch.gov.au). https://www.scamwatch.gov.au/stop-check-protect/real-life-stories/false-billing-john-updated-supplier-details-and-it-ended-up-costing-thousands (captured 2026-11-02, SHA-256 3f9b6d6ca276…)
- Hackers targeting businesses’ emails in sophisticated scam (news and alert, 26 Nov 2018). Australian Competition and Consumer Commission, National Anti-Scam Centre (scamwatch.gov.au). https://www.scamwatch.gov.au/news/hackers-targeting-businesses-emails-in-sophisticated-scam (captured 2026-11-02, SHA-256 2ba6aac8f7cd…)
- Payment redirection scams cost Australian businesses $14 million (news and alert, 30 Mar 2021). Australian Competition and Consumer Commission, National Anti-Scam Centre (scamwatch.gov.au). https://www.scamwatch.gov.au/about-us/news-and-alerts/payment-redirection-scams-cost-australian-businesses-14-million (captured 2026-11-02, SHA-256 bd8dc34aff27…)
- IDCARE: Small Business Cyber Resilience Service. IDCARE, Australia and New Zealand’s national identity and cyber support service (idcare.org); the service is funded by the Australian Government. https://www.idcare.org/smallbusiness (captured 2026-11-02, SHA-256 1c81b39839df…)
- Confirmation of Payee. Australian Payments Plus (auspayplus.com.au), the payments industry organisation that runs Confirmation of Payee. https://www.auspayplus.com.au/confirmation-payee (captured 2026-11-02, SHA-256 15720d498d17…)