Hard Target for Business

$166.8mlost to payment redirection scams in Australia in 2025, up 9.3% on 2024National Anti-Scam Centre

$97,200average self-reported cost of a cybercrime report for a medium businessASD Annual Cyber Threat Report 2024–25

32%of Australians feel pressure to process payments quickly at workEftsure AU Payment Security Survey 2026

How it happens

They don't break into your systems. They borrow your customer's inbox.

Your IT can be flawless and this still works, because the weak point is outside your walls.

STEP 1

A scammer gets into an inbox

Usually your customer's, sometimes a supplier's. A reused password is enough.

STEP 2

They read and wait

Sometimes for weeks, learning who pays what, and when.

STEP 3

They send a perfect copy

Your logo, your amount, your thread. One change: the bank details or the payment link.

STEP 4

Your customer pays them

You don't get paid. And your customer wants to know why your invoice was fake.

Firewalls don't stop this. People do, when they know exactly what to check.

Services

Practical protection, built around how your business actually pays and gets paid.

Core service

Payment Protection Program

In six weeks, we map how money moves in and out of your business, write procedures that fit how you work, brief your team, warn your customers, and test that it all holds up.

Payment risk mapBank and contact detail change procedurePayment release rulesStaff script cardsIncident cardCustomer warning packBefore and after scores

Six weeks · about 4–5 hours of your team's time

Week 1
Payment map90 minutes with the owner and finance lead to map how money moves and find the gaps.
Week 2
Your proceduresBank detail changes, payment release, staff scripts and a first-hour incident card, written for you.
Week 2
Your customersInvoice, email and website wording that tells customers how you'll never change bank details.
Week 3
Staff briefingHow these scams work, why smart people fall for them, and your new habits.
Week 6
30-day checkA live scenario test, a re-score, and a one-page summary for your board, bank or insurer.

Free

Invoice Fraud Check

Ten yes-or-no questions that show where a scammer could get between you and your money, plus an optional 20-minute call to go through your gaps.

5 minutes · no obligation

Start here

Payment Protection Briefing

A live session for finance and customer-facing staff, built on real cases. Breakfast, lunch or online, so the phones keep ringing.

60–90 minutes · up to 30 staff

Ongoing

Membership

For Program clients. Keeps procedures current, new staff trained, and the team alert as scams change, with help on call if something goes wrong.

Annual · quarterly updates

Priced by business size and confirmed in a one-page proposal after a short call. Also available: customer Payment Protection Events and keynotes. Five founding places at a reduced rate until 31 March 2027.

Book a 20-minute call

Where we fit

IT protects your systems. Hard Target protects the moments money moves.

We work alongside your IT provider, not instead of them.

Your IT provider

Firewalls, filtering and devices
Multi-factor authentication and backups
Phishing tests and security tools
Systems inside your business

Hard Target

How bank details get changed and approved
What staff do when someone applies pressure
How customers check your invoices are genuine
The first hour if money goes to the wrong place

Photo to come

About

Brook Durling

Brook has spent more than 20 years where money changes hands and trust matters most. He was a relationship manager and private banker, helped move Western Australia to electronic property settlement, and led customer success for the operator of WA's land registry.

He now leads a WA professional body, including its fraud awareness work. His honours degree in psychology shapes how Hard Target works: less about spotting red flags, more about why capable people get caught under pressure, and the simple habits that stop it.

20+ years in banking and propertyBA (Hons) PsychologyPerth, WA

Free Invoice Fraud Check

Ten questions. Five minutes. Be honest.

Every "no" is a gap a scammer can use. Here are three of the ten.

1Before changing a supplier's bank details, do you call them back on a number you already hold, never one from the email?
2Does a second person approve any change to a supplier's bank details or contact phone number before it's used?
4Have you told your customers in writing how you'll share bank details, and that you'll never change them by email?
+7Seven more on people, payment release, incidents and systems, with a score out of 10.

Questions

Common questions

Is this IT security?

No. We work on the people and processes around payments: how bank details get changed, how payments are approved, and what staff and customers check. We're happy to work alongside your IT provider.

How much of our time does it take?

The Briefing is one 60–90 minute session. The Program runs over six weeks and needs about 4–5 hours from your owner and finance lead, plus one staff briefing.

What does it cost?

Pricing depends on the size of your business. After a 20-minute call, you'll get a one-page proposal with a fixed price. Five founding clients get a reduced rate until 31 March 2027.

Where do you work?

In person across Perth and WA, and online anywhere in Australia.

We've already lost money. What should we do?

Call your bank immediately and ask them to stop or recall the payment. Then report it to ReportCyber at cyber.gov.au and to Scamwatch. IDCARE offers free support on 1800 595 160. Once things are under control, we can help you close the gap.

Do you sell software or take commissions?

We don't sell software. If we ever refer you to a partner, such as a payment-verification tool, any fee involved is disclosed to you in writing first.

Your system is secure. Your invoice isn't.