How to Recognize and Avoid Common Phishing Attacks
Phishing attacks continue to be a prevalent threat in today's digital landscape.
Five-minute lessons on payment redirection fraud, the cyber training the e-conveyancing rules expect, and AML/CTF, for law, conveyancing, accounting and real estate firms in Australia and New Zealand. Licensed to the insurers, compliance providers and professional bodies that serve them.
A firm moves its clients' money and holds their identities. Fraudsters know it, and the rules ask the firm to show that its people have been trained.
An email that looks like it came from the firm, or from the client, changes the account for a deposit, a settlement or an invoice. Payment redirection fraud cost Australians A$166.8 million in 2025 (ACCC, Targeting Scams). Victoria's solicitors' insurer counted 18 cyber claims in 2023-24, at an estimated A$2.14 million, most of them email compromise at smaller firms (LPLC).
A firm that settles property through an electronic lodgment network must ensure that every user has had cyber security awareness training covering secure use of the network, the firm's own systems and email, and that everyone else on the firm's systems has had the same on systems and email (participation rules, in force in every state and territory checked).
From 1 July 2026, Australian lawyers, conveyancers, accountants and real estate agents must give their staff AML/CTF training tailored to their firm. New Zealand's regime has covered the same professions since 2018 and 2019. A generic course does not show that it fits the firm.
Each lesson teaches one thing a person in the firm should do, such as the call-back before any bank details are used, and checks that they would do it.
A presenter walks the person through one routine, in the firm's own situations. Short enough to finish between two files.
Lessons run in the browser on any phone or computer. Nothing to install and nothing for the firm's IT to approve.
Every lesson ends with questions about what the person would do. The firm keeps a completion register of who finished what, when and with what score, with certificates.
How a settlement or invoice gets redirected and the call-back routine that stops it; the security habits the e-conveyancing rules expect of every user, across the lodgment network, the firm's own systems and email; and what the AML/CTF rules ask of a firm's people, on hire and ongoing.
Every lesson is five minutes, narrated by a presenter, runs in the browser on a phone or a computer with nothing to install, and ends with questions.
DefSafe reaches firms through partners who serve many of them at once. Running a firm yourself? Ask us and we will tell you how to get it.
You pay the payment redirection claims. One licence covers every firm you insure, and the completion register shows which of them have trained their people.
You write firms' AML/CTF programs. Add the training module those programs call for, tailored to the program, under your brand or ours.
Conveyancing institutes, law societies, real estate and accounting networks: a member programme your members can finish in minutes and keep on record.
Plain explanations of the threats people keep meeting, and what to do about them.
Phishing attacks continue to be a prevalent threat in today's digital landscape.
In today's digital age, email has become a crucial communication tool for individuals and businesses alike.
Ransomware attacks have been on the rise in recent years, causing significant damage to organizations of all sizes.
Say who your firms are, roughly how many, and what prompted the question. We will come back with how a programme would work for them.
Talk to usStraight to a person, not a sales sequence.