Architecture, engineering, and construction firms handle a steady stream of invoices, subcontractor payments, vendor requests, and project expenses.
That makes them attractive targets for business email compromise and payment fraud.
The dangerous requests often don't look obviously fake. They may reference a real project, a familiar vendor, and an amount that seems perfectly reasonable.
Here are four warning signs Greater Boston AEC firms should teach employees to recognize.
1. A normal request suddenly becomes urgent
Fraudulent messages often try to create time pressure.
Examples might include:
- "Can this be processed today?"
- "I need this completed before the meeting."
- "I'm on site and can't talk right now."
- "Please handle this before the bank closes."
Urgency encourages people to act before they verify.
Good practice:
Slow down whenever a financial request unexpectedly becomes urgent.
2. Banking instructions have changed
A request to change ACH, wire, or payment information should always receive additional scrutiny.
Even when an email appears to come from a known vendor, verify the change through another channel.
Good practice:
Call the vendor using a phone number you already know, rather than one supplied in the payment-change email.
3. Something about the sender is slightly different
Fraudulent messages don't always come from obviously fake addresses.
Look for:
- slightly altered domains
- unusual reply-to addresses
- unexpected forwarding
- changes in writing style
- requests coming from a different contact than usual
Attackers may also compromise a legitimate mailbox, which means the sender address itself may be real.
That is why verification procedures matter.
4. Someone asks you to skip the usual process
A strong payment process only works when employees follow it consistently.
Be cautious when a request asks someone to:
- bypass a second approval
- avoid calling a vendor
- send money to a new account immediately
- keep the request confidential
- make an exception "just this once"
Fraudsters often succeed by convincing someone that normal procedures don't apply to this particular request.
Payment security is a process, not just an email filter
Email security technology matters, but employees and business procedures also play an important role.
For construction, engineering, and architecture firms across Greater Boston and the South Shore, a simple callback or approval procedure can prevent an expensive mistake.
Take the 2-Minute Sitting Duck Assessment:
www.systemsupport.com/campaign/duck
Frequently Asked Questions
What is business email compromise?
Business email compromise is a type of fraud in which attackers impersonate or compromise a trusted email account to convince someone to send money or sensitive information.
Should every change in banking information be verified?
Yes. Changes to payment instructions should be independently confirmed using trusted contact information.
Why are construction companies targeted for payment fraud?
AEC firms regularly manage vendors, subcontractors, invoices, and high-value payments, creating opportunities for convincing impersonation attempts.
