--- title: Cybercriminals targeting construction companies to conduct email scams description: Cybercriminals are targeting construction companies with email scams. Discover the tactics used and how to protect your business from these threats. image: https://blog.voiceplus.com.au/hubfs/ACSC-2.png --- [![header-logo-img](https://blog.voiceplus.com.au/hubfs/VoicePlus_2023_blog_assets/logo_header.png)](https://www.voiceplus.com.au/) - [Home](https://www.voiceplus.com.au/) - Solutions ENTERPRISE SERVICES [Integrated Managed Mobility & EndPoint Services](https://www.voiceplus.com.au/enterprise-services/integrated-managed-mobility-and-endpoint-services) [Telecom Expense Management & Optimisation](https://www.voiceplus.com.au/enterprise-services/telecom-expense-management-and-optimisation) [Device Lifecycle Management](https://www.voiceplus.com.au/enterprise-services/device-lifecycle-management) [Procurement & Support](https://www.voiceplus.com.au/enterprise-services/procurement-and-support) [Device Security & Application](https://www.voiceplus.com.au/enterprise-services/device-security-and-application) [Site, Branch & Site Connectivity](https://www.voiceplus.com.au/enterprise-services/site-branch-and-site-connectivity) ENTERPRISE OUTCOMES [Reduce Costs](https://www.voiceplus.com.au/solutions/reduce-costs) [Track Assets & Centralized Management](https://www.voiceplus.com.au/solutions/track-assets-and-centralized-management) [Security](https://www.voiceplus.com.au/solutions/security) - [About Us](https://www.voiceplus.com.au/about-us) - [Contact Us](https://www.voiceplus.com.au/contact-us) - [Blog](https://blog.voiceplus.com.au/en-au) - [Trust Centre](https://www.voiceplus.com.au/trust-centre) # Cybercriminals targeting construction companies to conduct email scams ![underline-img](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus_2023_blog_assets/underline.png?width=212&height=3&name=underline.png) 13 July 2021 [![Share on linkedin](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus_2023_blog_assets/linkedin-color.png?width=24&name=linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.voiceplus.com.au/en-au/cybercriminals-targeting-construction-companies-to-conduct-email-scams?utm_medium=social&utm_source=linkedin) [![Share on twitter](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus_2023_blog_assets/twitter-color.png?width=24&name=twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https://blog.voiceplus.com.au/en-au/cybercriminals-targeting-construction-companies-to-conduct-email-scams?utm_medium=social&utm_source=twitter&url=https://blog.voiceplus.com.au/en-au/cybercriminals-targeting-construction-companies-to-conduct-email-scams?utm_medium=social&utm_source=twitter&source=tweetbutton&text=) [![Share on facebook](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus_2023_blog_assets/facebook-color.png?width=24&name=facebook-color.png)](http://www.facebook.com/share.php?u=https://blog.voiceplus.com.au/en-au/cybercriminals-targeting-construction-companies-to-conduct-email-scams?utm_medium=social&utm_source=facebook) Cybercriminals are targeting construction companies to conduct business email compromise scams. All parties to construction projects should be vigilant when emailing about invoices and bank details. **Alert status: MEDIUM**   The ACSC has observed a growing trend affecting construction companies and their customers. In the past six months there has been an increase in cybercriminals targeting builders and construction companies to conduct [business email compromise](https://www.cyber.gov.au/resources-business-and-government/maintaining-devices-and-systems/system-hardening-and-administration/email-hardening/protecting-against-business-email-compromise) (BEC) scams within Australia. In a BEC scam, cybercriminals will send fraudulent emails posing as a legitimate business. These emails typically target the customers of the business and will ask them to change bank account details for future invoice payments. Victims assume this request is legitimate and will then send invoice payments to a bank account operated by the scammer. These fraudulent emails may come from hacked email accounts, or cybercriminals might register domain names that are similar to legitimate companies (typically by swapping letters or adding additional characters). At a quick glance, an email address may look legitimate when it is actually being operated by a cybercriminal. Successful BECs may go unnoticed for weeks or months until the construction company follows up on missing payments. ## **Mitigation** All parties to construction projects should be vigilant when communicating by email, particularly when discussing bank account details or invoicing. Other mitigation strategies include: - **Verify payment-related requests**: If you receive a request to make a large transfer or to change bank account details, you should verify that the request is legitimate before actioning it. Call the sender's established phone number or visit them face-to-face before transferring any funds. - **Secure your email account**: It is recommended that construction companies and related businesses use strong passphrases and enable multi-factor authentication on their email accounts. - **Training and awareness**: Ensure that your staff are trained to recognise suspicious emails, including fraudulent bank account changes or requests to check or confirm login details. The latter may be a phishing attack which could compromise account security. Further advice on mitigating business email compromise is available on **cyber.gov.au**: - [Protecting Against Business Email Compromise](https://www.cyber.gov.au/resources-business-and-government/maintaining-devices-and-systems/system-hardening-and-administration/email-hardening/protecting-against-business-email-compromise) - [Implementing Multi-Factor Authentication](https://www.cyber.gov.au/resources-business-and-government/maintaining-devices-and-systems/system-hardening-and-administration/system-hardening/implementing-multi-factor-authentication) - [Phishing – Scam Emails](https://www.cyber.gov.au/learn-basics/explore-basics/watch-out-threats/phishing-emails-and-texts) - [Know how to spot phishing (scam) messages](https://www.cyber.gov.au/acsc/view-all-content/campaign/know-how-spot-phishing-scam-messages) - [How to Combat Fake Emails](https://www.cyber.gov.au/resources-business-and-government/maintaining-devices-and-systems/system-hardening-and-administration/email-hardening/how-combat-fake-emails)   ## Latest from the Blog [![blog-featured](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus%20One%20Platform.png?width=226&height=226&name=VoicePlus%20One%20Platform.png)](https://blog.voiceplus.com.au/en-au/one-platform-every-endpoint-atrium-intune-laptop-management) [VoicePlus Atrium — one platform managing mobiles, laptops, lifecycle, and Intune security under one roof ![arrow](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus_2023_blog_assets/arrownext.png?width=27&height=12&name=arrownext.png)](https://blog.voiceplus.com.au/en-au/one-platform-every-endpoint-atrium-intune-laptop-management) [![blog-featured](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus%20Enterprise%20Governance1.png?width=226&height=226&name=VoicePlus%20Enterprise%20Governance1.png)](https://blog.voiceplus.com.au/en-au/enterprise-mobility-governance-what-it-looks-like) [What Enterprise-Grade Mobility Governance Actually Looks Like ![arrow](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus_2023_blog_assets/arrownext.png?width=27&height=12&name=arrownext.png)](https://blog.voiceplus.com.au/en-au/enterprise-mobility-governance-what-it-looks-like) [![blog-featured](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus%20ISO27001%20trust.png?width=226&height=226&name=VoicePlus%20ISO27001%20trust.png)](https://blog.voiceplus.com.au/en-au/beyond-the-badge-why-voiceplus-chose-the-hard-road-to-iso/iec-270012022) [VoicePlus Achieves ISO/IEC 27001:2022: Why We Chose the Hard Road to Build Real Trust ![arrow](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus_2023_blog_assets/arrownext.png?width=27&height=12&name=arrownext.png)](https://blog.voiceplus.com.au/en-au/beyond-the-badge-why-voiceplus-chose-the-hard-road-to-iso/iec-270012022) [![blog-featured](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus%20000%20BYOD%20Old%20Phones.png?width=226&height=226&name=VoicePlus%20000%20BYOD%20Old%20Phones.png)](https://blog.voiceplus.com.au/en-au/why-employers-must-act-on-emergency-calling-risks-triple-zero) [Why Employers Must Act on Emergency-Calling Risks | Triple Zero ![arrow](https://blog.voiceplus.com.au/hs-fs/hubfs/VoicePlus_2023_blog_assets/arrownext.png?width=27&height=12&name=arrownext.png)](https://blog.voiceplus.com.au/en-au/why-employers-must-act-on-emergency-calling-risks-triple-zero) 3 Strategies to Reduce Telecom Cost [Here's How](https://landing.voiceplus.com.au/en-au/3-strategies-to-reduce-telecom-cost) ![footer-logoimg](https://blog.voiceplus.com.au/hubfs/VoicePlus_2023_blog_assets/footerlogo.png) VoicePlus is your independent managed mobility and endpoint specialist. We combine our experience and technology to secure cost savings and optimise productivity for clients seeking better business outcomes. The VoicePlus Companies acknowledges the Traditional owners of the lands on which we meet and work, both at our offices on Cammeraygal land and our locations across Australia. We pay our respects to Elders’ past, present and emerging and honour their living culture and custodianship. Solutions [Integrated Managed Mobility](https://www.voiceplus.com.au/services/managed-mobile-computer-services) [Telecom Expense Management](https://www.voiceplus.com.au/services/telecom-expense-management) [Device Lifecycle Management](https://www.voiceplus.com.au/services/device-lifecycle-management) [Procurement & Support](https://www.voiceplus.com.au/services/procurement-and-support) [Device Security & Application](https://www.voiceplus.com.au/services/device-security) [Site, Branch & Site Connectivity](https://www.voiceplus.com.au/services/managed-endpoint) ![seperator-img](https://blog.voiceplus.com.au/hubfs/VoicePlus_2023_blog_assets/seperator.png) [Reduce Cost](https://www.voiceplus.com.au/enterprise-outcomes/cost-optimisation) [Track Assets](https://www.voiceplus.com.au/enterprise-outcomes/cost-visibility) [Security](https://www.voiceplus.com.au/services/device-security) VoicePlus [Privacy Policy](https://www.voiceplus.com.au/policies/privacy-policy) [Modern Slavery](https://www.voiceplus.com.au/policies/modern-slavery-statement) [Contact Us](https://www.voiceplus.com.au/contact-us) [About Us](https://www.voiceplus.com.au/about-us) [Trust Centre](https://www.voiceplus.com.au/trust-centre) Find Us [+61 2 9334 5600](tel:+61%202%209334%205600) [customercare@voiceplus.com.au](mailto:customercare@voiceplus.com.au) [VoicePlus Head Office Suite 902, 275 Alfred Street North Sydney, NSW 2060 Australia](https://goo.gl/maps/kaky2AuyRWgHJicT9) [VoicePlus Branch Office Suite A, Floor 8, 152 Quay Street Auckland, AUK 1010 New Zealand](https://maps.app.goo.gl/78fGwdLFHfXHNN4h9) [![twitter-img](https://blog.voiceplus.com.au/hubfs/VoicePlus_2023_blog_assets/twitter.png)](https://x.com/VoicePlusData1) [![linkedin-img](https://blog.voiceplus.com.au/hubfs/VoicePlus_2023_blog_assets/linkedin.png)](https://www.linkedin.com/company/voiceplus-data) [![fb-img](https://blog.voiceplus.com.au/hubfs/VoicePlus_2023_blog_assets/fb.png)](https://www.facebook.com/VoicePlusData) ![VoicePlus is ISO/IEC 27001:2022 Certified](https://www.voiceplus.com.au/assets/footer-photos/ISO-Certified-1.png "VoicePlus is ISO/IEC 27001:2022 Certified") ![VoicePlus is ISO/IEC 27001:2022 Certified](https://www.voiceplus.com.au/assets/footer-photos/jas-anz-logo.gif "VoicePlus is ISO/IEC 27001:2022 Certified") --- Copyright © 2026. All Rights Reserved ![](https://blog.voiceplus.com.au/hubfs/raw_assets/public/Custom/page/VoicePlus_blog_2023_theme/icons8-settings-32.png) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Australian Cyber Security Centre", "url" : "https://blog.voiceplus.com.au/en-au/author/australian-cyber-security-centre" }, "dateModified" : "2024-09-11T10:49:34.194Z", "datePublished" : "2021-07-12T23:00:38.000Z", "headline" : "Cybercriminals targeting construction companies to conduct email scams", "image" : [ "https://blog.voiceplus.com.au/hubfs/ACSC-2.png" ], "mainEntityOfPage" : { "@id" : "https://blog.voiceplus.com.au/en-au/cybercriminals-targeting-construction-companies-to-conduct-email-scams", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.voiceplus.com.au/hubfs/voiceplus_logo.png" }, "name" : "VoicePlus" } } ```