Spear Phishing

How is spear phishing different from ordinary phishing?

Where ordinary phishing is sprayed at thousands of inboxes, spear phishing is aimed at one person or team and built from research. The attacker studies public sources such as LinkedIn, the company website, and past news, then writes a message that names real colleagues, real projects, and real suppliers. A typical Australian example targets an accounts payable officer by name, references an actual project the business is running, and asks them to action a bank detail change for a supplier they genuinely deal with. Because the details are correct, the request feels routine rather than suspicious.

Why it matters for Australian finance teams

Personalisation is what makes spear phishing so effective and so dangerous. Generic phishing red flags, such as odd greetings or irrelevant content, are deliberately absent. Finance staff are prime targets because they can move money, and a well-researched message can produce a large single loss. Spear phishing underpins CEO fraud and business email compromise, which the ACCC’s Scamwatch consistently identifies as high-cost threats to Australian organisations. The takeaway for finance leaders is that accuracy in a message is not evidence that a payment instruction is genuine.

How ezyshield helps

No matter how well researched the message, ezyshield checks the fact that decides the outcome: whether the person or business actually owns the account you are about to pay. It confirms bank account ownership before money moves and re-verifies whenever details change, so a convincing, tailored request to redirect funds is caught. ezyshield is not an email-security or training tool, so keep those defences alongside it. See how it works and how we address CEO fraud.