11/05/2026
One hacked email cost a company $200,000.
At Downtime Assassin, we see the aftermath of cyberattacks regularly. One of the most damaging — and misunderstood — threats hitting Australian trade and construction businesses right now is Business Email Compromise (BEC).
Here's how it works.
A criminal gets into a supplier's email account. They don't act straight away. They sit quietly, studying invoicing patterns, tone, and payment timing. Then, at exactly the right moment, they send a familiar-looking invoice — from the real email address — with one small but critical change: the bank details are theirs.
You pay. The money is gone.
We recently helped review a legal case involving exactly this scenario. The outcome was sobering. The court found that the company which paid the fraudulent invoice was still legally responsible for the original debt — even though the email came from the supplier's own compromised account, even though it was the supplier who got hacked.
They paid twice. The law upheld it.
In 2026, trade and construction businesses are prime targets. Large invoices, multiple suppliers, and busy accounts teams create exactly the conditions these criminals look for. They're patient — they watch, learn the patterns, and strike at precisely the right moment.
So what can you do?
Email security. The right setup detects and blocks a significant number of these attacks before they reach your team. Not all of them — but it's a strong first line of defence.
Train your people. Especially anyone in accounts. They need to know the warning signs: urgency in tone, last-minute changes to payment details, subtle variations in sender addresses. And the most important habit — always call to verify changed banking details before any large transfer goes out. Always.
Know what you're paying for. Break/fix IT is reactive — something has to go wrong before anything gets done. A managed service means proactive protection is already in place. With BEC, waiting until after the fact is too late.
We provide cyber awareness training built for construction and trades businesses — available as a simple monthly subscription, done entirely online.