Stop the fake invoice before it's paid.
Invoice and payment-diversion fraud rarely needs malware. It needs one convincing email that seems to come from your MD, a supplier or your own domain. On Complete and Secure+ we run a stricter Microsoft Defender for Office 365 policy with impersonation protection for your key people and domains, and keep it up to date as your business changes.
Uses Microsoft Defender for Office 365 Plan 1, included in Microsoft 365 Business Premium, which every plan requires, set to a stricter standard we maintain.
How it works
Name the targets
We agree which people and domains fraudsters are most likely to impersonate - usually directors, finance and your main partners.
Tighten the policy
Impersonation protection and stricter phishing settings go on top of the standard filtering.
Warn, don't just block
Safety tips flag unusual senders, so staff pause before acting.
Keep it current
As people join, leave or change roles, we update the protected list.
Where it helps
Real situations this covers for businesses like yours.
'Can you pay this today?' from the MD
An email using your MD's name from an outside address is flagged as impersonation.
A supplier's 'new bank details'
A look-alike of a protected supplier domain is caught. We also recommend a simple rule: confirm bank-detail changes by phone.
Your domain copied with one letter changed
Domain impersonation protection spots look-alikes of your own domain.
Finance targeted at month end
The people who approve payments get the strongest protection.
Which plans include it
Prices exclude VAT. Plans require Microsoft 365 Business Premium (or equivalent), billed separately at Microsoft's list price - we manage and right-size your licences. See full pricing.
Common questions
How is this different from standard email filtering?+
Every plan includes spam and phishing filtering. Complete and Secure+ add impersonation protection for your key people and domains, and a stricter policy we maintain for you.
Will it stop every fraud email?+
No tool can. It catches most impersonation attempts and warns staff about the rest. Pair it with a simple rule: confirm any change of bank details by phone, on a number you already hold.
Who counts as a 'key person'?+
We agree the list with you. Usually it's directors, finance staff and anyone who approves payments - the people fraudsters most like to impersonate.
Will it flag genuine emails?+
Occasionally. If a genuine sender is caught, tell the helpdesk and we'll adjust the policy so their mail gets through.
Is this included on Essentials?+
No. Advanced email security is included on Complete and Secure+. Essentials has the standard spam and phishing filtering.
Works alongside
Want this looked after for you?
Free Microsoft 365 security audit - Cancel anytime in your first 3 months