The rules have changed – impersonation scams

Posted on 07/09/2026

The rules have changed.  Recognition isn’t proof any longer.

For generations, recognising someone was one of the simplest ways we decided whether they were genuine.

A familiar face, a trusted voice, your manager’s email or a supplier you’ve worked with for years all gave us confidence that we were dealing with the right person. Those signals were difficult to fake, so they became shortcuts for trust.

Increasingly, that’s no longer enough.

Criminals are becoming more sophisticated at impersonating people and organisations we trust. Whether it’s an email from a CEO, a supplier requesting new bank details or a convincing phone call claiming to be from your bank, the objective is always the same: to get you to act before you stop and question whether the request is genuine.

The technology behind these scams continues to evolve. Our habits need to evolve with it.

Why impersonation works

When most people think about cybercrime, they imagine hackers breaking into computer systems or stealing passwords.

Many impersonation scams don’t work that way.

Instead, criminals exploit something much simpler: trust.

Rather than trying to defeat security systems, they try to convince people they’re someone they’re not. They may impersonate a manager, a supplier, your bank, a government agency or another trusted organisation. Increasingly, they’re using technology, including artificial intelligence, to make those impersonations more convincing through cloned voices, realistic websites and highly personalised messages.

 

The disguise changes depending on who they’re trying to convince. The objective doesn’t.

They’re relying on familiarity to lower your guard long enough for you to click on a link, transfer money, change bank details, share sensitive information or grant access to a system.

That’s why impersonation scams can be so effective. They don’t ask us to trust a stranger. They ask us to trust someone we think we already know.

How to protect yourself

The good news is you don’t need to become a cyber security expert to reduce your risk.

One simple change in thinking can make a significant difference.

Whenever a request involves money, sensitive information or changes to normal business processes, don’t rely on recognition alone. Take a moment to verify it independently.

One of the most common impersonation tactics involves changing payment details. If you’re asked to update a supplier’s bank account or redirect a payment, contact the supplier using a phone number or email address you already know – not the details provided in the message.

Urgency is another common tactic. Requests framed as “urgent”, “confidential” or “for your eyes only” are designed to discourage questions and encourage quick decisions. If someone is asking you to bypass normal approval processes or act immediately, that’s a good reason to slow down rather than speed up.

And don’t ignore your instincts. If something feels different – a change in writing style, an unusual request, a call at an unexpected time or behaviour that’s out of character – pause and verify before responding.

Technology may continue to change, but good habits remain remarkably effective.

The one habit worth keeping

For years, the question was simple: “Do I recognise this person?”

Today, a better question is: “Have I verified this request?”

Verification doesn’t need to be complicated. It might be a quick phone call to a known number, confirming payment details through an existing contact, following your organisation’s normal approval process or simply asking a colleague for a second opinion before you act.

That one extra step can prevent a costly mistake. Because while the methods criminals use will continue to evolve, the principle remains the same.

Recognition isn’t proof. Verification is.

The Rules have changed is a crime awareness campaign developed by Crime Stoppers South Australia in partnership with OpSys Australia to help South Australians better understand and reduce the risks of impersonation scams.

---

---

YOU MAY ALSO LIKE TO READ