Egidio — Threat Lab · Teams & Freelancers Guide · v1.0 · July 2026 · License CC BY 4.0 · egidio.app/en/laboratoire/exposure-profiles/overloaded-professional/
This isn't a lack of vigilance
An employee or freelancer who falls for a fake invoice isn't less trained than anyone else. Facing hundreds of notifications a day, the brain switches to automatic processing — it recognizes a familiar format and acts without close reading. That's a rational adaptation to overload, not negligence to be fixed with more training alone.
The most frequent scenarios
The fake urgent work email
A message imitating Teams, Outlook, or an internal tool, demanding urgent validation or a re-login — slipped into the normal flow of the day.
The fake invoice to approve
An email in the exact format handled daily, asking for a payment to be approved or banking details to be updated.
The fake supplier invoice
A message imitating a real supplier, requesting updated banking details or payment of a modified amount.
The fake urgent client
A manufactured emergency that pushes you to process a quote or deposit without the usual checks.
The rules that actually protect
Slow down specifically for financial requests
An automatic sorting habit is efficient for most messages — the one systematic exception to flag is any financial request or request for credentials, even an urgent one.
Check the exact sender, never the display name
The display name in an email can be spoofed — a glance at the full address is often enough to unmask the impersonation.
No banking-detail changes from a message alone
A real supplier never changes its payment details by email alone — a call to the usual number, never the one given in the message, confirms or denies it in a minute.
For the self-employed and small businesses: the professional line
One phone carrying two lives — personal and business — doubles the attack surface without doubling your vigilance. Separating the two uses with a dual SIM, then protecting both lines at the same level, structurally reduces that risk. See Dual SIM for work and personal life.
The takeaway
Scammers don't need to know you. The statistics already do. It isn't the team's vigilance that's at fault — it's a volume of requests no brain can read one by one, without an upstream filter.
For HR and business owners
The most useful gesture isn't a generic reminder to be careful — it's normalizing verification as a shared reflex: a reminder that any doubt deserves a question asked out loud before acting, with no fear of slowing things down. This guide is freely shareable internally, no email required.
How to cite this publication
Egidio, Threat Lab, "Teams & Freelancers Guide," v1.0, 2026, egidio.app/en/publications/guide-teams-freelancers/
Rigor note. This guide derives from the Overloaded professional and Freelancer profiles, and the page Dual SIM for work and personal life. No new figures are introduced here. License CC BY 4.0.
Learn more
Egidio — The Threat Laboratory, "Teams & Freelancers Guide — Protecting Overloaded Teams and the Self-Employed", egidio.app/en/publications/guide-teams-freelancers/. Licensed CC BY 4.0.
Free to reuse, including commercially, with attribution. Reuse terms.