How do I stop my team falling for scam emails?
Phishing and email protection means blocking scam emails before they reach your inbox, and locking down your accounts so a stolen password isn't enough to get in. It's for teams at charities, restaurants, law firms and other small and medium-sized businesses that rely on email every day but don't have an IT department watching it.
What's included
Better filtering, stronger sign-ins, and a team that knows what to do.
Fewer scam emails reaching your team
We tighten the settings on the email system you already use so obvious scams never land.
- Suspicious links and attachments flagged or blocked
- Lookalike sender addresses caught before anyone replies
- Your domain set up so it's harder for scammers to send email pretending to be you
- Clear warnings on emails from outside your organisation
Accounts that stay locked, even if a password leaks
Stronger sign-ins for email and the accounts that matter most.
- Multi-factor authentication on email and key accounts
- Help choosing and using a password manager
- Old and unused accounts closed down
- Checks for passwords that have appeared in known data breaches
A team that knows what to do
Technology catches a lot. People catch the rest.
- A simple "if in doubt, ask" process for reporting a dodgy email
- A real person to check a suspicious email before anyone clicks
- Short, practical training through EquaProtect Academy
- Help straight away if someone has already clicked
Frequently asked questions
What is phishing, in plain English?
A phishing email pretends to be someone you trust, such as your bank, a supplier, a donor, a client or even your own boss. It tries to trick you into clicking a link, opening a file, paying an invoice or handing over a password. These emails are often convincing, and they're one of the most common ways small organisations get caught out.
We already use Microsoft 365 or Gmail. Doesn't that filter spam already?
It catches some of it, but the default settings are rarely tuned for your business, and the most convincing scams are designed to get past basic filters. We review and strengthen what you already have before suggesting anything new.
What is multi-factor authentication, and will it slow my staff down?
Multi-factor authentication (MFA) means signing in needs a second step as well as a password, usually a tap on a phone app. That means a stolen password alone isn't enough. On a trusted device most people barely notice it, and we set it up around how your team actually works, including shared or front-desk computers.
Someone on my team clicked a dodgy link. What should we do?
Don't panic and don't hide it, because speed matters more than blame. If you can, disconnect the device from the internet, change the password for the affected account from a different device, and get in touch with us straight away. A real person will walk you through the next steps.
We're a small law firm. Are we more of a target?
Firms that handle client money are a common target for payment-redirection scams, where a criminal pretends to be you or your client and asks for money to go to a "new" bank account. We help put checks in place on the email side and in your process, such as always confirming bank details by phone.
Protect your team's inbox
Tell us which email system you use and roughly how many people use it, and we'll follow up with what protection would look like for you.