Emails that look like routine requests to sign a contract, change order, engagement letter, or vendor form are a common way criminals steal business logins. The note usually carries a familiar brand name, a short deadline, and a link or attachment. Opening it can lead to a fake sign-in page or a harmful file rather than a real document.
Who is affected
Florida healthcare, legal, construction, and professional-services offices, especially owners, office managers, billing staff, and anyone who reviews or signs agreements.
Why it matters
Work email is often the front door to billing, client files, and payment approvals. If a login is stolen, the attacker can read sensitive messages, send further requests that look legitimate, or try to redirect a payment. These industries handle contracts every week, so a fake signature request does not look out of place.
Recommended actions
- Do not open a signature link or attachment from an email you were not expecting, even if the display name looks like a client, patient, subcontractor, or known e-signature service.
- Review documents by signing in the way you normally do—through a bookmark or an address you type yourself—not through a link in the email.
- Read the full sender address. Small spelling changes, or a free webmail address behind a business name, are warning signs.
- Confirm unexpected signature requests by calling a number already on file. Do not use a phone number printed in the email.
- Never type a work password, one-time code, or payment detail into a page opened from an unsolicited email.
- Turn on multi-factor authentication for email and for any account used to sign documents or pay bills.
- If someone may have entered a password on a suspicious page, change it the same day, sign that account out of other sessions if the service allows it, and tell your IT contact.
- Require a second approval, by phone or in person, before any contract or bank-detail change is accepted from email alone.
Need help implementing these protections?
ITNS provides managed IT, cybersecurity, and compliance support across Florida. Tell us about your environment — we will help you prioritize what matters most for your team.
This advisory is for general awareness only and does not constitute legal or compliance advice. Every environment is different. Contact ITNS for guidance specific to your business.