How we handle business email compromise

An email may impersonate someone or use a lookalike sender address. It can also come from a real vendor's mailbox that an attacker has taken over. A genuine sender address does not make a request to change payment details safe.

Every client's email passes through our email security platform before delivery. It checks each message for phishing, impersonation, lookalike senders, and malicious links and attachments. Suspicious messages are held in quarantine instead of reaching your inbox. See how email quarantine works.

Use the report-phishing button in Outlook or mark the message as junk. A 24/7 analyst service checks every report, usually within minutes, and replies with a diagnosis.

You can also forward the message to support@teclara.tech. This opens a ticket. We check its headers and trace where it came from, then give you a clear yes or no on whether it is phishing.

If Teclara Messenger is on your computer, contact us there before acting on an email, message, request or call you are unsure about. Teclara will never call you unsolicited.

Once the analyst confirms a message is phishing, every copy in your organization is quarantined, and the message is blocked across every organization our email security protects.

A hacked vendor mailbox can send email from the genuine address and pass every check. Before changing banking or payment details, call the vendor on a number you already have. Never use a number taken from the email.

See Microsoft 365 account takeover or Google Workspace account takeover for how we contain the takeover, investigate it and restore access.