Zoes

Blog

How email attacks against small businesses actually work - with real examples, the data behind them, and what to change.
Four coworkers looking at a laptop together at a table
October 14, 2026 · 6 min readPhishing protection for a small business: a setup checklistThe settings and habits that stop most phishing at a company without a security team, in the order worth doing them - for Google Workspace and Microsoft 365.Read →
A person holding a payment card while typing on a laptop
October 14, 2026 · 6 min readBusiness email compromise: how it works and how to stop itWhat a business email compromise message looks like, why spam filters miss it, the payment controls that stop it, and what to do in the first hours if money has already gone.Read →
Hands typing on a laptop at a desk
October 14, 2026 · 5 min readEmail security for Google WorkspaceWhat Gmail protects you from out of the box, the admin settings worth changing, the gap that remains, and how an API-based layer fits into Workspace.Read →
A team gathered around a laptop in an open office
October 14, 2026 · 5 min readEmail security for Microsoft 365What Exchange Online Protection and Defender for Office 365 cover, the settings worth changing, what still gets through, and how an API-based layer fits in.Read →
A person signing paperwork at a desk
October 14, 2026 · 6 min readVendor email compromise: when the invoice really comes from your supplierAttackers who break into a supplier's mailbox reply inside your real invoice threads. The sender passes every check. Here is what still gives it away.Read →
A woman at an office desk looking at her phone
October 14, 2026 · 5 min readCallback phishing: the scam email that asks you to callNo link, no attachment - just an invoice for a subscription you never bought and a phone number. Why it gets past filters and how to stop it reaching a remote-access session.Read →
A wall covered in printed QR codes
October 14, 2026 · 5 min readQR code phishing: why a picture of a link is harder to checkA QR code in an email moves the click from a protected laptop to a personal phone. How these messages are built, and the settings and habits that blunt them.Read →
A hand holding up a plain blue card
October 14, 2026 · 5 min readWhy new employees get the "quick favour" gift-card emailA message from "the CEO" asking a week-one hire to buy gift cards is one of the oldest scams still working. Why new staff are the target and what onboarding should say on day one.Read →
Two people reviewing printed figures beside laptops
October 14, 2026 · 6 min readWhy business email compromise stays so expensiveReported BEC losses have held near $3 billion a year in FBI data, roughly fifty times what is reported for ransomware. Four structural reasons it keeps working.Read →
A laptop on a white desk beside a potted plant
October 14, 2026 · 6 min readWhat AI changed about phishing, and what it did notLanguage models removed the spelling-mistake tell and made personalization cheap. They did not change where a message comes from or what it asks for.Read →
Hands typing on a laptop in a bright room
October 14, 2026 · 5 min readHow to spot a phishing email: five checks, in orderA checklist that catches most phishing and fraud, ordered by how quickly each check gives an answer, with worked examples. Written to be shared with a team.Read →
Three plain envelopes on a white surface
October 14, 2026 · 6 min readSPF, DKIM and DMARC, explained with real recordsWhat each of the three checks proves, what the DNS records look like for Google Workspace and Microsoft 365, and how to roll out DMARC without breaking your own mail.Read →

See what is reaching your inboxes

Connects to Google Workspace or Microsoft 365 in minutes. Try it free for 14 days.

Get startedView pricing