Scammers contact the person who runs payroll and pretend to be an employee who needs a bank account updated before the next paycheck. They may also text staff a link that looks like a payroll or benefits page and ask them to re-enter direct-deposit details. These requests often show up before a holiday or bonus run, when people are busy and want to make sure a coworker gets paid on time.
Who is affected
Florida offices that pay employees by direct deposit, including healthcare practices, law firms, construction companies, and professional services firms. The risk is higher where one person can change bank details without a second check, and where some staff are in the field and hard to confirm in person.
Why it matters
A changed deposit account can send real wages to a scammer, and the business may still owe the employee that pay. Sorting it out with the bank and the payroll provider takes time, and a stolen payroll login can put later pay runs at risk as well.
Recommended actions
- Do not change a direct-deposit account based only on an email, text, or chat message, even if the name looks familiar.
- Confirm every bank-account change with the employee in person or by calling a phone number already on file, not a number in the message.
- Require a second person, such as the owner or office manager, to approve any payroll bank change, including changes requested before holiday or bonus pay.
- Ask your payroll provider to alert you when bank details or payees change, and review those alerts the same day.
- Tell staff your office will never ask for bank details by surprise text or link. If they get that kind of message, they should call the office using a known number.
- If a wrong change may already have gone through, call your bank and payroll provider the same day and tell the affected employee.
Need help implementing these protections?
ITNS provides managed IT, cybersecurity, and compliance support across Florida. Tell us about your environment — we will help you prioritize what matters most for your team.
This advisory is for general awareness only and does not constitute legal or compliance advice. Every environment is different. Contact ITNS for guidance specific to your business.