Fake bank adviser, fake e-mails, hacked accounts: the scams that affect small businesses, and the right reflexes, according to Cybermalveillance.gouv.fr (the French government's cyber-assistance service).
The fake bank adviser
Someone calls, introducing themselves as your bank, knows your name or your account number, and asks you to "validate" a transaction or to give a code received by SMS. Your bank never asks for that. Hang up, and call your bank back on the number written on your card.
Official source: Fake bank adviser fraud (in French)
The fake e-mail (phishing)
An e-mail or an SMS imitates a well-known organisation (bank, carrier, administration) and pushes you to click quickly. Do not click: type the address of the official website yourself.
Official source: What to do in case of phishing (in French)
The hacked account
One of your accounts is sending messages you did not write, or your password no longer works. Change the password from a safe device and turn on two-step verification.
Official source: Account hacking (in French)
The fake "mandatory notices" letter
A real example received in October 2026 by a small business: an e-mail signed by a "national centre" with a very official-sounding name, with a list of legal articles, a threat of a fine "of up to €10,000 per employee" and a link to "become compliant". At the bottom of the message, in small print: this "centre" is a trade name of a private company that sells posters.
- The signs: a name that imitates the administration, a sender address that does not end in ".gouv.fr", fear of the fine, urgency, a link to pay.
- What is true: a company that has employees does have information to display (labour inspectorate, safety instructions, equality, harassment…). But the templates and explanations are free on the official websites (service-public.fr, French Ministry of Labour).
- The right reflex: do not click on any link, not even "unsubscribe"; mark the message as spam; pay nothing. If in doubt, check for yourself on service-public.fr.
Change of bank details: never pay to new bank details received by e-mail without confirming them by phone, on a number you already know.