Fraud & Security

Protecting clients, contacts, and counterparties from fraud and financial misconduct is a priority. Criminals increasingly use impersonation, phishing, cloned websites, payment diversion, account takeover, malware, false urgency, social engineering, and relationship-based manipulation to obtain money, credentials, or sensitive information. High-value transactions, cross-border activity, and time-sensitive instructions can be particularly attractive to fraudsters.

Fraud can affect individuals, businesses, family offices, intermediaries, trustees, and institutions. It may cause direct financial loss, operational disruption, confidentiality breaches, emotional distress, and reputational harm. Awareness, verification, and caution are essential.

• Impersonation fraud: a fraudster pretends to be a bank, investment firm, lawyer, service provider, regulator, adviser, or colleague.
• Payment diversion or safe-account fraud: victims are pressured to transfer funds to an account described as secure, replacement, urgent, escrow, or temporary.
• Investment fraud: false opportunities, cloned brands, fake dashboards, or misleading returns are used to induce transfers.
• Romance or relationship fraud: trust is built over time before money is requested.
• Purchase or invoice fraud: false invoices or non-existent goods or services are used to obtain payment.
• Account takeover: compromised credentials are used to access email, portal, or banking systems.
• Technical support fraud: victims are persuaded to install software or provide remote access.

Warning signs may include unexpected contact, unusual urgency, secrecy requests, pressure not to verify independently, changes to bank details, requests to share passcodes, reluctance to communicate through normal channels, grammatical inconsistencies, unusual domain names, unexpected attachments or links, and attempts to bypass internal approval or callback procedures.

Always verify requests independently using a trusted contact method. Do not rely solely on email signatures, caller display, messaging applications, or links contained in a message. Use known contact details from official records or a previously verified source. Never disclose passwords, full credentials, one-time codes, or security answers to anyone. Keep systems, browsers, and security software up to date, and use strong unique passwords and multi-factor authentication where available.

Before making any payment, especially to a new or amended account, carry out robust callback verification and internal approval checks. Be cautious when communications create pressure or attempt to short-circuit normal controls.

EMC Securities Pty Ltd will never ask you to disclose full passwords or security credentials and will not ask you to transfer funds to a replacement or “safe” account without appropriate verification through established channels. If you receive any suspicious communication that appears to come from us, treat it with caution until independently verified.

If you suspect fraud, contact your bank or payment provider immediately, secure affected systems, change passwords, review account access, preserve evidence, and report the matter to the relevant law-enforcement, cybercrime, or anti-fraud authority in your jurisdiction. If the communication appears related to us or our branding, contact us promptly through the official contact channels shown on our website so that we can review the matter and take appropriate protective steps where possible.