SCAMS, cybercrime and business email compromise are increasing in sophistication and impact. Learn how to identify warning signs, respond effectively, and how CurbyMcLintock can assist with investigations, asset tracing, and recovery.
In today's digital world, cybercriminals are becoming increasingly sophisticated. What was once limited to poorly written emails promising lottery winnings has evolved into highly convincing scams, cyber-enabled frauds, business email compromise schemes and identity theft attacks that target individuals, businesses, and government agencies alike. Unfortunately, many victims do not realise they have been targeted until significant financial, reputational, or emotional damage has already occurred.
At CurbyMcLintock, we regularly assist organisations and individuals who have fallen victim to fraud, scams, cybercrime, business email compromise incidents and other forms of financial crime. Our investigators, cyber & digital experts and forensic accountants help clients understand what occurred, identify vulnerabilities, trace the movement of funds and support recovery efforts where possible.
The Growing Threat
Cybercrime is no longer just an IT issue. It is a financial, operational, governance and reputational risk. Modern fraudsters exploit technology, business processes and human behaviour, often using sophisticated social engineering techniques to gain trust and persuade victims to act against their own interests.
Common scams and cybercrime schemes inlude:
Business Email Compromise (BEC) – Criminals impersonate trusted suppliers, executives, or business partners to redirect payments into fraudulent accounts.
Investment and Cryptocurrency Scams – Fraudsters promise high returns and create convincing online platforms to encourage victims to transfer funds.
Phishing and Credential Theft – Fake emails, text messages, or websites are used to capture passwords and sensitive information.
Identity Theft – Personal information is harvested and used to commit fraud or access financial accounts.
Romance and Social Engineering Scams – Victims are manipulated into providing money or sensitive information under false pretences.
Invoice and Payment Redirection Fraud – Criminals alter payment details on legitimate invoices or intercept communications between trusted parties, directing funds to accounts controlled by them.
The reality is that cybercriminals often rely less on technology and more on human trust.
Why Intelligent People Become Victims
One of the most common misconceptions about scams and cybercrime is that victims are careless or lack awareness. In our experience, the opposite is often true. Modern fraudsters invest significant time researching their targets and understanding their business processes. By exploiting trust, familiarity and urgency, cybercriminals are often able to deceive experienced professionals, business owners and executives into taking actions they would not otherwise take.
The Warning Signs
While every scam is different, common red flags include:
Urgent requests for payment or action.
Unexpected changes to bank account details.
Emails that appear genuine but contain subtle inconsistencies.
Requests for confidential information or passwords.
Investment opportunities that seem too good to be true.
Unusual account activity or unauthorised transactions.
If something feels wrong, it is worth taking the time to verify the request independently.
What To Do If You Have Been Scammed
Many victims feel embarrassed after discovering they have been targeted. That reaction is understandable—but it should never prevent action.
Time is critical. In many matters involving cybercrime, fraud or business email compromise, stolen funds can be transferred through multiple accounts, jurisdictions or cryptocurrency platforms within hours. Prompt action may improve the prospects of preserving evidence tracing funds and limiting losses.
If you suspect you have been the victim of a scam or cybercrime incident:
Stop further transactions immediately.
Contact your financial institution to attempt to freeze or recover funds.
Preserve evidence, including emails, messages, invoices, and transaction records.
Report the incident to relevant authorities.
Seek professional assistance to understand what occurred and explore recovery options.
The sooner action is taken, the greater the likelihood of limiting losses and identifying those responsible.
Beyond Recovery: Understanding What Happened
Many organisations focus solely on recovering lost funds. While recovery is important, understanding how the incident occurred is equally critical.
While recovering lost funds is often the immediate priority, a thorough investigation can also help identify how the incident occurred and whether weaknesses in controls, governance arrangements or business processes contributed to the loss.
A cybercrime incident can expose vulnerabilities such as:
Weak verification processes.
Ineffective payment controls.
Inadequate employee awareness.
Poor supplier onboarding practices.
Deficiencies in governance and oversight.
Identifying and addressing these weaknesses helps reduce the risk of future incidents.
How CurbyMcLintock Can Help
CurbyMcLintock has extensive experience investigating cybercrime, scams, fraud, financial crime, asset tracing exercises, and recovery support engagements. Our multidisciplinary team includes specialists with backgrounds in investigations, law enforcement, regulatory agencies, forensic accounting, cyber a digital forensics and fraud risk management.
Our services include:
Cybercrime and scam investigations.
Business Email Compromise investigations.
Asset tracking and recovery support.
Fraud and financial crime investigations.
Evidence collection and analysis.
Liaison with legal advisers, financial institutions, and law enforcement.
Fraud and cyber risk assessments.
Governance and control reviews.
Case Study – Business Email Compromise (ASX-listed company)
CurbyMcLintock assisted an ASX-listed company that became the victim of a sophisticated business email compromise attack, resulting in the transfer of millions of dollars to overseas accounts. Through forensic investigation, funds-flow analysis and international asset tracing efforts, a portion of the funds was successfully recovered. Working alongside legal practitioners and law enforcement agencies in the relevant jurisdictions, CurbyMcLintock assisted in identifying and securing ‘mule’ accounts used to receive the misappropriated funds, preventing further dissipation and facilitating the return of recovered monies to the client.
Think You’ve Been Targeted?
If you believe you have been the victim of a scam, cybercrime incident, business email compromise attack, invoice fraud or other fraudulent activity, early intervention can make a significant difference.
Prompt action may assist to preserve evidence, identify those responsible, trace the movement of funds and support recovery efforts.
Whether you are an individual, business owner, board member, or government agency, understanding what happened is often the first step towards protecting your finances, reputation and future operations.
