Most property payment fraud starts weeks before the fake invoice appears: an attacker gains access to a conveyancer's, agent's or vendor's mailbox through a phished credential, then sits silently, reading the transaction thread and learning names, dates and dollar figures. Near settlement, they insert a near-identical email — often from a lookalike domain with one character swapped, or from the genuine but compromise…
01 · 30Free preview
The anatomy of a business email compromise attack
01 · Payment Redirection & Business Email Compromise · Masterclass · 14 min
The rest of this lesson is for enrolled learners
30 lessons, scored knowledge checks and AI role-play — unlocked on enrolment.
Previews show the opening of the first lesson only. Enrol to continue this lesson, work through the full program at your own pace, and earn your completion certificate.
Version 2026-08-26.v1
48-hour written cancellation window · refund terms · secure checkout · instant access
Compare programsLocked in this program
- Where redirection fraud shows up in a transactionMasterclass
- Red flags that should trigger a stop-and-verifyMasterclass
- Verifying bank details by callback — the non-negotiable stepMasterclass
- Knowledge check: Payment Redirection & BECKnowledge check
- How trust accounts become a fraud targetMasterclass
- Segregation of duties and dual authorisationMasterclass
- Reconciliation discipline as a fraud detectorMasterclass
- A landlord's disbursement account 'changes' the day before payoutAI role-play
- Knowledge check: Trust Account Fraud ControlsKnowledge check
- Identity fraud indicators in sales transactionsMasterclass
- Identity fraud in tenancy applicationsMasterclass
- How title fraud happens and where agents intersect with itMasterclass
- Practical checks that reduce title fraud exposureReading
- Knowledge check: Identity & Title FraudKnowledge check
- Recognising phishing and spear-phishing attemptsMasterclass
- Password and credential hygiene for agency teamsMasterclass
- Multi-factor authentication as the baseline, not the extraMasterclass
- Device security and CRM access controlReading
- Knowledge check: Phishing & Access ControlKnowledge check
- The Privacy Act and Australian Privacy Principles for agenciesMasterclass
- Applying the APPs to applications, databases and marketingMasterclass
- Tenancy data retention and secure destructionMasterclass
- Writing collection notices and privacy policies that hold upReading
- Knowledge check: Privacy Act & APP ComplianceKnowledge check
- The Notifiable Data Breaches scheme and when it appliesMasterclass
- Building a breach response plan step by stepMasterclass
- Assessing vendor and supplier risk before granting accessMasterclass
- A property management CRM export is accessed without authorisationAI role-play
- Knowledge check: Breach Response & Vendor RiskKnowledge check