Got hit with a fake invoice scheme last monday and almost lost $2,800 before my coworker spotted the typo in the email domain

The sender's address said '@company.co' instead of '@company.com' and the scammer even knew the name of our actual vendor, so has anyone else nearly fallen for a spear-phishing attack that looked way too real?

2 comments

2 Comments

jordan_webb1mo agoTop Commenter

The domain trick got me too-same 'co' vs 'com' thing on a fake QuickBooks renewal.

the_claire1mo ago

You gotta double check the URL every time. I always manually type in the address bar now instead of clicking links from emails. The scammers are getting way too good at making those fake pages look identical to the real ones. Do you use a password manager at all? Some of them can warn you when a site looks sketchy.