business email compromise

September 11, 2026 | 15 min

Ten Employees Clicked the Fake Invoice: Phishing Simulation at a Singapore Trading Company

A composite scenario from Singapore: a 70-person trading company runs its first phishing simulation almost as an afterthought, and ten people click a fake supplier invoice in a single afternoon. How to read a first click-rate, why zero reports is a worse signal than ten clicks, and why the programme — not the platform licence — is the thing that changes outcomes.

August 20, 2026 | 21 min

Email Security in Hong Kong: A Wholesaler's Near-Miss Supplier Fraud

A Hong Kong wholesaler almost pays a fake supplier invoice, and what saves it is a phone call rather than a security product. Why business email compromise defeats filtering, and what real coverage looks like at 80 people.