Fraud Defense

Fraud Defense

1.0 Introduction

IoT Secure’s Fraud Defense is specifically engineered to prevent spear phishing attacks that target your organization by impersonating executives or other key personnel. These attacks often use email addresses or display names that closely resemble those of high-level employees, tricking recipients into believing the communication is legitimate.

Fraud Defense works by analyzing subtle variations in email addresses and sender names, identifying suspicious patterns, and blocking these fraudulent attempts before they can reach your inbox. This ensures that your organization is protected from social engineering tactics commonly used in spear phishing attacks.

2.0 License

To use the this feature, you will need the "Fraud Defense" add-on license for Anti-Spam.  Contact IoT Secure Support at support@iotsecure.io for questions about your license.

3.0 Setup

  1. In Active Directory, create a new group named "Email-Fraud Defense". Ensure that the group name is entered exactly as shown, including capitalization and spacing.
  2. Add the organization's executives and any other users who are at risk of being impersonated or targeted by spear phishing attacks to this group.
  3. Fraud Defense will automatically read the users in this group during the next scheduled LDAP sync. No further action is needed after the group is populated.