Previous Blog
Next Blog
Stop. Think. Verify. Protect.
This November, Kitsap Credit Union is sharing four steps to help members spot and avoid scams. They work just as well for your business, where invoices, vendor payments, and payroll are moving through a busy day, and where AI tools now help scammers write convincing emails and even mimic familiar voices.
Stop: Urgency is the warning sign
When someone pushes you to act fast, pause. Watch for:
Think: Does this make sense?
Were you expecting this invoice or call, and is it for something you actually ordered? Did the payment details change partway through?
Scammers can pose as vendors, government agencies, or even your coworkers, so a familiar name, logo, or caller ID isn’t proof on its own. The same goes for offers that seem too good to be true, like unusually cheap card processing.
Verify: Use a contact you already trust
If a vendor says their bank account changed, call the number you already have on file, not the one in the email. If a caller says they’re from a government agency, hang up and look up the official number yourself. If a message includes a link, type the official web address into your browser instead of clicking directly on the link.
Protect: Make it a team habit
The person who pays the bills or answers the phone is your first line of defense.
Kitsap Credit Union will never call or text asking for your PIN, card number, Digital Banking username or password, or a recent verification code. If someone claiming to be us asks, end the conversation and contact us directly. Reach out before you send money or share information, or right away if you think your business account has been targeted. You can also report scams to the FTC at ReportFraud.ftc.gov.
For more tips, visit our [Fraud and Security Resources] page or the FTC’s [Scams and Your Small Business] guide.
Stop: Urgency is the warning sign
When someone pushes you to act fast, pause. Watch for:
- Demands for immediate payment, or threats of penalties or shutdowns
- Requests to pay by wire, gift card, cryptocurrency, or person-to-person payment
- Pressure to keep it quiet or skip your normal approval process
Think: Does this make sense?
Were you expecting this invoice or call, and is it for something you actually ordered? Did the payment details change partway through?
Scammers can pose as vendors, government agencies, or even your coworkers, so a familiar name, logo, or caller ID isn’t proof on its own. The same goes for offers that seem too good to be true, like unusually cheap card processing.
Verify: Use a contact you already trust
If a vendor says their bank account changed, call the number you already have on file, not the one in the email. If a caller says they’re from a government agency, hang up and look up the official number yourself. If a message includes a link, type the official web address into your browser instead of clicking directly on the link.
Protect: Make it a team habit
The person who pays the bills or answers the phone is your first line of defense.
- Require a second approval for any change to vendor banking details, and follow your approval process even for small amounts.
- Turn on multifactor authentication for email and Digital Banking, and set up account alerts so unusual activity gets noticed quickly.
- Review who has access to your accounts under Account Services > Manage Users.
- Be wary of remote access requests and unexpected attachments.
- Talk with your staff about current scams so everyone knows the warning signs.
Kitsap Credit Union will never call or text asking for your PIN, card number, Digital Banking username or password, or a recent verification code. If someone claiming to be us asks, end the conversation and contact us directly. Reach out before you send money or share information, or right away if you think your business account has been targeted. You can also report scams to the FTC at ReportFraud.ftc.gov.
For more tips, visit our [Fraud and Security Resources] page or the FTC’s [Scams and Your Small Business] guide.
November 9, 2026