Email fraud cases: What can Doncaster businesses do to protect against cyber criminals in South Yorkshire

Cyber criminals are increasingly targeting small and medium-sized enterprises, using convincing fake emails to steal money, data, and login credentials.

Across the region, firms of all sizes have reported incidents involving fraudulent emails that impersonate suppliers, colleagues, or even company directors. The consequences range from financial loss to serious reputational damage, and recovery is rarely straightforward.

Why email remains the primary target for cybercriminals

Criminals favour email because it works. A well-crafted message can bypass basic defences and land directly in an employee's inbox, appearing to come from a trusted contact. Once someone clicks a malicious link or transfers funds to a fraudulent account, the damage is done. A recent report on how easily attackers can hack a business using just a few clicks shows how sophisticated phishing can be, even tricking staff into believing fraudulent communications are genuine.

The scale of the problem is significant. According to the UK cyber security breaches survey, phishing attacks—the majority of which arrive via email—remain the most commonly identified form of cyber crime among UK businesses.

The problem with generic email accounts

Many small businesses still rely on free consumer email accounts to handle day-to-day correspondence. This creates an immediate credibility problem. Emails arriving from a generic address are harder for recipients to verify, easier for fraudsters to spoof, and offer fewer built-in security features than purpose-built solutions.

Switching to a dedicated business email account with a custom domain gives companies more control. It makes impersonation harder, supports authentication protocols that help receiving servers verify legitimacy, and signals to clients and suppliers that the business takes its communications seriously.

What Doncaster businesses should do now

The first step is a straightforward audit. Business owners should identify which email accounts are used for client communication, invoicing, and internal correspondence, then assess whether those accounts have adequate protections in place.

Two-factor authentication should be enabled on all accounts where it is available. Staff should be briefed on how to spot suspicious emails by being wary of unexpected requests, mismatched sender addresses, and unusual urgency.

It’s also worth reviewing what happens when an employee leaves. Shared passwords, unmonitored inboxes, and forgotten accounts are all potential entry points for fraudsters.

Staying ahead of the threat

Cyber criminals adapt quickly and the tactics used against South Yorkshire businesses today will look different in twelve months.

Local business support organisations, including those operating under the South Yorkshire Mayoral Combined Authority, offer guidance and resources for firms looking to improve their cyber resilience. For Doncaster businesses, the message is clear. Email fraud is not an abstract threat. It is happening nearby and basic precautions can make a meaningful difference.

This article was possible thanks to Proton.