What Is an AI Voice Scam?
AI voice scams are targeting finance teams—using deepfake tech to mimic executives and authorise payments. Learn how they work—and how to stop them.
The end of the financial year (EOFY) is an infamously busy time, to put it mildly. By February, most accounts payable (AP) teams are already bracing themselves for the whirlwind of tax returns, bookkeeping and completing pay runs.
However, this busy period also attracts scammers looking to exploit vulnerable businesses. The financial year in New Zealand ends on March 31, which means the pressure to finalise paperwork and ensure all reports are correct is at its peak around this time. If you’re a business leader in New Zealand, it’s crucial to recognise the tactics scammers use to target your organisation during this period.
In New Zealand, scams have been on the rise, with an alarming $2 billion lost to digital scams in recent years. This statistic highlights the urgency for businesses to stay vigilant. A variety of scams are targeting local companies, and fraudulent vendor payment schemes are among the most concerning. These scams can take many forms, from fake invoices to Business Email Compromise (BEC), where cybercriminals impersonate company executives or suppliers to trick employees into transferring large sums of money.
A recent report highlighted the rising cost of BEC scams, with New Zealand businesses losing up to $2.2 million in just nine months, with the average loss per business reaching $55,000. For instance, one local cleaning supply company paid a $50,000 invoice after receiving a fraudulent email about a change in banking details. This type of attack highlights the importance of solid cybersecurity measures.
As the EOFY deadline approaches, scams evolve to exploit busy professionals. Common tactics include:
As scams become more sophisticated, it’s critical to stay informed. In New Zealand, businesses are encouraged to report suspicious activity to Netsafe, which is the primary authority for tackling online fraud in the region.
Netsafe provides resources and guidance for individuals and businesses to report scams. Netsafe works alongside New Zealand Police and other government agencies to help recover stolen funds and prevent future attacks. If your business encounters any form of cybercrime, it’s important to contact Netsafe immediately.
The EOFY deadline in New Zealand falls on March 31, with businesses having until July 7 to file tax returns. The Inland Revenue Department (IRD) oversees the filing of these returns, so it’s crucial to stay on top of your obligations, especially when facing the heightened risk of scams during this period.
As we’ve seen in New Zealand’s recent $2 billion scam losses, scammers know when businesses are most vulnerable. Their attempts to steal sensitive data or money increase in the lead-up to EOFY, so it’s vital to maintain robust cybersecurity practices throughout the year, not just at the finish line.
Here are a few simple steps businesses can take to protect themselves:
By staying proactive and aware of the risks, New Zealand businesses can avoid becoming victims of scams during this critical time.
With scams costing New Zealand businesses millions, it’s essential to stay informed about the tactics used by fraudsters and take steps to protect your organisation. By referencing trusted resources like Netsafe and staying up-to-date with the latest security measures, you can safeguard your company and its finances.
AI voice scams are targeting finance teams—using deepfake tech to mimic executives and authorise payments. Learn how they work—and how to stop them.
Discover 14 real-world AI-driven tax scams targeting US finance teams this season—what they look like, how they work, and how to stop them in action.
A cyberattack on Aussie super funds reveals major control gaps. Learn what finance leaders must do now to protect payments and prevent fraud.
Eftsure provides continuous control monitoring to protect your eft payments. Our multi-factor verification approach protects your organisation from financial loss due to cybercrime, fraud and error.