Scams targeting small businesses

Never install remote access software at the request of someone who contacted you unsolicited

Verify the survey through the agency website before participating.

Do not click links in unsolicited emails claiming to be from the IRS — the IRS does not initiate contact by email.

Verify any executive request for tax data by calling the executive directly using a known phone number.

Monitor your business credit reports regularly for unauthorized accounts.

Hang up and call your state tax agency directly using the number on its official website.

Check the IRS Offer in Compromise Pre-Qualifier tool at irs.gov before hiring any company.

Review app consent requests directly from the official admin console before approving anything.

Open the PayPal business dashboard directly and review alerts there, not from a message link.

Never click links in AWS notification emails — go directly to the AWS Management Console at console.aws.amazon.com.

Never click links in PayPal alert emails — open a browser and go directly to paypal.com to check your account status.

Never release goods based on a buyer's screen — always verify the payment has arrived in your own PayPal account or email.

PayPal will never ask you to submit tax documents or verify business details through an email link — always use the PayPal Business dashboard directly.

Zelle does not have account tiers, business upgrades, or premium accounts that require fees — this is always a scam.

Verify all payment requests by calling the vendor or client at a known phone number — do not use contact information from the email requesting payment.

Never release goods based on a screenshot — always verify that the payment appears in your own Cash App activity feed.

Check your subscription status directly at account.microsoft.com, never through email links.

Know that Google does not charge for business profile verification and rarely makes unsolicited calls about it.

Check your billing status directly at ads.google.com — never through email links.

Always verify a business phone number by checking their official website before calling a number from Google Maps.

Never pay an invoice you did not expect — verify with the supposed sender through a separate communication channel.

Never click tracking links in emails — copy the tracking number and enter it directly at ups.com.

Verify any UPS Store communication by calling the specific store location directly using the number listed on theupsstore.com.

Never open unexpected attachments — UPS does not send shipping labels via unsolicited email.

If you did not place a FedEx Office order, ignore and delete the email.

Verify any FedEx invoices by logging in to your FedEx Billing Online account at fedex.com.

Access your FedEx account billing by navigating directly to fedex.com.

Contact the utility using the number on your statement.

Use the platform's official admin recovery path and avoid remote-control sessions.

Check account quality from the Meta dashboard before clicking anything.

Use only the platform's official recovery flow and keep support inside the real app or site.

Never click links in LinkedIn connection requests from people you do not recognize.

LinkedIn's identity verification is done through the official app using a government ID and selfie — never through external links or payments.

Verify all W-2 requests by calling the executive directly using a known phone number — never respond to the email.

Access your tax transcript only through irs.gov/individuals/get-transcript — never through emailed links.

Consult a trusted, independent tax professional about ERC eligibility before engaging any promoter.

Verify any charity's tax-exempt status using the IRS Tax Exempt Organization Search at irs.gov/charities.

Apply for SBA disaster loans only at sba.gov/disaster or by visiting a local SBA disaster center — the SBA never charges application fees.

Never rely on email notifications alone — always verify payments by logging into your PayPal account directly.

Access the admin console directly at admin.google.com — never through email links.

Confirm renewal requirements with the actual registry or city office.

Verify the supplier's business registration, physical address, and trade references before placing orders.

Review all invoices against actual purchase orders — never pay without verifying the service was ordered.

Be skeptical of any SEO company that guarantees specific rankings — legitimate agencies discuss strategy, not guaranteed outcomes.

Never pay upfront fees to secure a loan — legitimate lenders deduct costs from loan proceeds or charge at closing.

Verify any compliance requirement directly with the government agency referenced in the notice.

Establish a policy that only authorized personnel can approve supply orders, and never confirm orders with unknown callers.

Research the awarding organization independently — check for reviews, Better Business Bureau complaints, and verifiable past winners.

Hang up and call your local BBB directly using the number from bbb.org to verify any communication.

Always renew domains directly through your current registrar's website — never through unsolicited notices.

Require all advertising commitments to be in writing with authorized signatures before any work begins.

Sign out of all sessions and rotate passwords after suspected browser compromise.

Remember that real courts serve legal notices by mail or in person — never by email.

Apply for building permits only through your city or county's official government website or in person at the permit office.

File business registrations only through your state's official Secretary of State .gov website.

File taxes only through IRS-authorized e-file providers listed at irs.gov or use IRS Free File.

Verify the offer by contacting the brand directly through their official website.

Do not pay — extortion payments almost always lead to repeated demands.

Reverse image search testimonial photos to check if they are stock images.

Sellers should photograph and weigh all outgoing shipments and use tracking with signature confirmation.

Never refund overpayments to a different account or by a different payment method — refund only through PayPal's built-in refund feature to the original sender.

Venmo is designed for payments between people who know and trust each other — do not use it for transactions with strangers.

Do not pay — report the fake reviews to Google through your Business Profile by flagging each one as inappropriate.

Go directly to the tax authority website instead of using message links.

Track packages only through the official ups.com website or UPS mobile app.

Verify customs charges directly through the official DHL website using your tracking number.

Contact the shipping carrier directly if you believe there is a genuine address issue with a package.

Verify any customs charges by contacting the shipping carrier or customs broker directly.

Manage delivery preferences only by logging in directly through the carrier's official website or app.

Never open email attachments from unknown senders or unexpected shipping notifications.

Track packages only by entering the tracking number directly at usps.com — never click tracking links in emails.

USPS handles postage-due items by attaching a notice to the physical mail piece and collecting payment upon delivery or at the post office — never through online links.

Contact UPS directly through the official website or phone number to verify any customs charges.

Verify any COD shipment by calling UPS at 1-800-742-5877 before making any payment.

Contact FedEx directly at 1-800-463-3339 to verify any customs charges.

Check for legitimate delivery exceptions by logging in to fedex.com directly.

Ask your bank or card issuer directly about chargeback options before hiring anyone.

Open disputes directly with your bank or payment provider instead of paying a middleman first.

Verify any government relief program through official .gov websites or by calling the agency directly.

Apply for SBA disaster loans only through sba.gov or by calling the SBA directly at their published number.

Check for auto-renewal settings immediately after any subscription purchase.

Buy software only from official vendor websites or authorized resellers.

The government does not contact people to offer free money — any such contact is a scam.

Legitimate government grants are listed on grants.gov and never require application fees.

Verify any relief program through official government websites — usa.gov, sba.gov, or your country's equivalent.

HUD does not call individuals to offer grants — contact your local HUD office directly at hud.gov for legitimate programs.

Research any grant opportunity through the Minority Business Development Agency (MBDA) at mbda.gov.

Verify any grant notification directly through the funding agency's official website and your institution's grants office.

FEMA never charges application fees for disaster assistance — apply directly at disasterassistance.gov or call 1-800-621-FEMA.

Access state grant programs only through official .gov websites — never through links in unsolicited emails.

Search for legitimate scholarships through your school's financial aid office, the Department of Education, or studentaid.gov.

Research women-owned business programs through the SBA's Office of Women's Business Ownership at sba.gov.

Never accept a check for more than the selling price.

Never deposit unsolicited checks from unknown senders.

Call the issuing bank directly using a number from their official website to verify any cashier's check.

Use gel pens or security ink when writing checks, as they are resistant to chemical washing.

Research any new employer through your state's business registration database before accepting payment.

Remember that the IRS will never call, text, or email to ask for personal information or payment.

File your tax return as early as possible each year to reduce the window for fraud.

Remember that legitimate sweepstakes never require upfront payment to claim a prize.

Compare the offered rate, including all fees, to your current utility rate before switching.

Compare the monthly plan cost to simply paying for legal consultations as needed.

Always verify bank account change requests by calling the vendor at a number from your existing records

Require in-person or phone verification for any direct deposit changes using a known employee phone number

Verify any attorney-initiated payment requests by calling the law firm using independently sourced contact information

Verify all new suppliers through independent research and phone confirmation before making any payments

Use the tax authority's official website instead of the text.

Always verify banking detail changes by calling the vendor directly using a phone number from your records — not from the email.

Check your actual registrar account directly to verify your domain's renewal status and expiry date.

Verify every invoice against purchase orders and approved vendor lists before authorizing payment.

Instruct staff to never provide equipment or ordering details to unsolicited callers.

Maintain a central registry of all software subscriptions and cross-reference every invoice against it.

Verify all cloud invoices by logging directly into your provider's billing console — AWS, Google Cloud, and Azure all have online billing dashboards.

Read every invoice carefully, including fine print — look for disclaimers indicating it is a solicitation, not a bill.

Only pay trademark fees through the official trademark office website (USPTO.gov in the US) or through your registered attorney.

File your annual report directly through your state's Secretary of State website to pay only the actual government fee.

Verify any compliance requirements directly with the relevant government agency — OSHA, DOL, or your state's labor department.