1. Fake Vendor or Payment Requests

One of the most common scams we see this time of year involves fraudsters impersonating vendors, clients, or even your own team members. They typically send a professional-looking email asking to update bank details or rush a wire transfer before the holiday break.

What to do:
Never act on a payment request or banking change without verifying it directly, ideally by calling your known contact using a trusted number. Even a 30-second confirmation call can prevent major losses.

2. Holiday Phishing Emails

Scammers love to use familiar holiday themes to trick recipients into clicking. Think fake shipping notifications, gift card offers, or donation requests. These emails often contain malicious links or attachments that can steal credentials or install malware.

What to do:
Hover over links before clicking, check the sender’s full email address, and avoid downloading attachments from unknown sources. If something feels off, trust your instincts and delete it.

3. Gift Card and Employee Bonus Scams

Fraudsters often pose as executives or HR leaders asking employees to “quickly pick up gift cards” or “distribute bonuses.” The messages can sound convincing and are often sent when leaders are out of the office.

What to do:
Remind your team that legitimate bonus programs will always follow established procedures and never require buying or emailing gift card codes. Encourage employees to confirm unusual requests directly with their manager or HR.

4. Fake Charities and Year-End Giving Scams

The spirit of generosity is strong during the holidays, and scammers know it. Fake charities or “matching donation” campaigns pop up this time of year, preying on businesses that like to give back.

What to do:
Before donating, confirm that a charity is legitimate through trusted sites like the Better Business Bureau Wise Giving Alliance or Charity Watch. If you receive an unsolicited request, especially one asking for urgent payment or wire transfer, proceed with caution.

5. Account Verification or IT Impersonation Scams

At the end of the year, fraudsters often send fake “system update” or “account verification” emails or text messages pretending to be your bank, IT provider, or payment processor. The goal is to capture your login credentials.

What to do:
Never click links to verify account information from an unsolicited email. Always access your banking or vendor portals by typing the known URL directly into your browser.

Stay Vigilant!

Fraud may take a holiday, but scammers do not. The good news? A few simple safeguards, a little extra awareness, and a dedicated banking team go a long way in keeping your business safe.

At Bridgewater Bank, we are committed to helping you protect what you’ve built. If you have questions about suspicious activity or how to bolster your security, we’d love to connect.

Your business is worth protecting. 

Member FDIC | Equal Housing Lender