Service companies hold payments, addresses and gate codes, often with no IT team. A few habits stop most attacks.
In this article
- Why small service companies get targeted
- Phishing emails and texts
- Fake invoices and changed bank details
- Turn on two-factor authentication
- Passwords
- Devices in the field
- Backups
- Payment card data
- Train the team
- Know what to do if it happens
- Warning signs to teach the office
- Check your software vendors
- Frequently asked questions
- Frequently asked questions
Why small service companies get targeted
Service businesses handle payments, customer addresses, gate codes and supplier invoices, often with no IT team. That makes them easy targets for phishing, fake invoices and account takeovers. A few simple habits stop most attacks.
Phishing emails and texts
Fake messages pretend to be your bank, supplier, payment processor or even you. Teach the office to check the sender, avoid clicking links in unexpected messages and log in directly through the official website.
Keep reading — free
The rest of this article is worth the 20 seconds
Tell us where to send it and the full piece unlocks right here, along with everything else on this blog.
Rather just talk? Message us on WhatsApp.
Fake invoices and changed bank details
A common scam is an email saying a supplier changed its bank account. Always confirm changes by calling a number you already have, never the one in the email.
Turn on two-factor authentication
Email, bank, payment processor, field service software and social media accounts should all use two-factor authentication. It blocks most stolen-password attacks.
Passwords
Use a password manager and different passwords for every system. Remove access the same day someone leaves the company.
Devices in the field
Technician phones and tablets need screen locks and updates. A lost tablet should be able to be wiped remotely.
Backups
Keep customer lists, price books and financial data backed up. If a computer is locked by ransomware, a backup is what keeps the business running.
Payment card data
Never write full card numbers on paper or save them in notes. Use your processor's secure tools.
Train the team
A 15-minute talk every few months, with real examples, does more than any expensive software.
Know what to do if it happens
Write down who to call: bank, processor, IT help and insurance. Check if your business insurance includes cyber coverage.
Warning signs to teach the office
- Urgency: "pay today or the account will be closed."
- Requests for gift cards or wire transfers.
- Small spelling changes in a familiar email address.
- Attachments you did not expect.
When something feels off, the rule is simple: stop and call to confirm.
Check your software vendors
Your field service software, payment processor and email provider hold most of your data. Use the security settings they offer, review who has admin access and remove old users.
Price every call so it pays.
We help service businesses set clear policies, book better jobs and turn more calls into profitable work.
Frequently asked questions
What is the most common cyberattack on small service businesses?
Phishing and fake invoices are among the most common. Confirming bank detail changes by phone and turning on two-factor authentication stop many of them.