Skip to content
image

Fraud awareness and advice

Keeping your business safe takes more than good IT security. It means knowing how to spot the psychological tricks criminals use. Fraudsters change their tactics all the time but you can often stop them in their tracks if you know how they operate. Here are the most common tactics to watch out for, the practical steps you can take to protect your funds, and what to do if the worst happens.

Placeholder

The golden rule: never share your One-Time Password (OTP)

A One-Time Password (OTP) or PIN acts as the final lock between a fraudster and your money.

Funding Circle, your bank, or the police will NEVER ask you to share an OTP, PIN, or full password over the phone, via text, or by email.


Fraudsters may invent emergencies to trick you into reading these codes out loud to them or sending via text or email. If anyone asks you for a security code or password, it’s likely a scam. Hang up the phone straight away and never send it to them.

Spotting social engineering

Modern fraudsters rarely hack into secure financial systems directly. They rely on tactics like social engineering to hack people. This can also result in an emotional reaction so you let your guard down and skip your own security checks.

Always stop and questions any request if it involves:

  • Urgency: Claims an account will be frozen, a vital delivery cancelled, or a fine issued unless you act immediately.
  • Authority: Impersonates someone you trust, such as your CEO, a fraud investigator, or an official from HMRC.
  • Secrecy: Tells you to keep a payment confidential, or coaches you on exactly what to say to your financial company to bypass checks.

Top threats to your business

Overdraft
CEO fraud (executive impersonation)

A fraudster impersonates a company director or senior manager using a fake email address or WhatsApp message. They’ll request an urgent, confidential payment to a new bank account or ask for high-value gift cards for a ‘client.’


Always verify urgent or unusual payment requests by speaking to the executive directly on a known, trusted phone number.

Overdraft
Invoice fraud

Fraudsters pose as one of your regular suppliers or an agency like HMRC. They send a fake invoice or an email asking to send  future payments to a ‘new’ bank account.

  • If a supplier requests a change to their payment details, call them directly using the contact information on their official website. Never use the phone number printed on the new, suspicious invoice.
Overdraft
Phishing, vishing and smishing

Fraudsters pretend to be a legitimate company like Funding Circle or your bank and trick you into clicking a link to a fake website. They then steal your passwords or card numbers via email (phishing), phone calls (vishing), or text messages (smishing).


  • Stop and check before responding to any unexpected email, text, or phone call that demands immediate action. Never click unverified links or share one-time passcodes. You should always confirm urgent requests by closing the message and contacting the company directly through their official website or phone number. 
business purchase
Purchase scams

Scammers list fake or non-existent items, vehicles or machinery for sale on social media and spoofed websites. The adverts look authentic. Once you pay via bank transfer, the seller disappears.

  • Always research the seller online before buying. You should be able to find reviews or feedback. Beware of sites that have little to no online presence. If something feels off about a website or seller, trust your instincts and shop elsewhere.  It is recommended you view the item you are buying in person especially if high value goods before you send the money

How to protect your business operations

You can reduce your risk by following these simple internal controls.

Think - stop, challenge, protect

We proudly support the Take Five to Stop Fraud campaign. Before making any payment:

  • STOP: Take a moment to think before parting with your money or information.
  • CHALLENGE: It’s okay to reject, refuse, or ignore any requests. Only criminals will try to rush or panic you.
  • PROTECT: Contact your bank immediately if you think you’ve fallen for a scam and report it to Action Fraud.

Set up dual authorisation

No single person in your business should hold the power to both change a supplier's bank details and approve the payment. We recommend your internal processes require at least two staff members to sign off on major financial updates

Pay attention to confirmation of payee (CoP)

When setting up a new payment, your bank matches the account name against official records. Stop if you receive a CoP warning showing you that the names don’t match. Fraudsters often claim it’s a system glitch or an un-updated account name.  Proceeding risks sending money straight to a scammer and may leave you liable for the loss.

The Authorised Push Payment (APP) scam reimbursement scheme

An APP scam happens when you’re tricked into authorising a transfer to a fraudster. To protect consumers and micro-enterprises, the UK Payment Systems Regulator (PSR) has introduced a mandatory reimbursement scheme.

If you’re hit by an APP scam, you can generally claim a refund from your payment service provider up to £85,000, provided you meet the ‘consumer standard of caution.’ To stay covered under the scheme:

  • Pay attention to interventions: Take note of warnings given by your payment service provider when making a payment.
  • Report promptly: Contact your payment service provider as soon as you suspect a scam.
  • Share information: Give complete, honest details during their investigation.
  • Report to the police: And provide us with the crime reference number.

Refunds are only turned down if it’s proven that a customer acted fraudulently or showed gross negligence by ignoring explicit warnings.

Placeholder

What to do if you suspect a scam

If a scammer targets you, try to stay calm and take action immediately.

1.Stop communicating: 
Don’t reply to emails or speak to the suspect. Informing them gives them time to move funds away. 


2.Secure your accounts: 
If the transaction involves your Funding Circle account, please call our Operations team immediately on 0203 308 9693. If it involves your main business bank, call your bank using the official number on the back of your bank card. Ask them to freeze the transaction.


3.Gather your evidence:
This is required for APP Reimbursement claims. Keep your emails, invoices, text messages, and transaction records. You’ll need these to help us investigate and show you took proper care when submitting a claim.


4. Report to Report Fraud: 
Run by the City of London Police, it serves as the central platform for reporting cyber crime and fraud in England, Wales, and Northern Ireland. 


You can reach the new service in two ways:

Online: Visit the Report Fraud Portal

Phone: Call 0300 123 2040

Funding Circle staff
Contact Funding Circle support

If you suspect fraudulent activity on your account, please call our Operations team on 0203 308 9693 as soon as possible.

  • Operating hours: Monday to Thursday 9am to 6pm, and Friday 9am to 4:30pm.
  • Out of hours: If you have a Funding Circle FlexiPay card and have concerns outside of these hours, please freeze your card immediately by logging into your account online or via the Funding Circle app. Select the 'Card' tab and then 'Freeze Card'.