Protecting your brokerage online:
A helpful guide to cyber safety

Two brokers learning about cyber security

At Pepper Money, we know brokers are busy helping customers find solutions that fit. But in today’s digital world, protecting your business online is just as important as protecting your clients’ financial wellbeing. 

In 2024 alone, Australians lost over $2 billion to scams1.

That figure includes individuals and businesses, with brokers increasingly targeted due to the sensitive financial data they handle. That’s why we’ve created this helpful guide to help you stay secure, spot scams early, and respond quickly if something goes wrong.

Whether you’re working from the office, on the go, or from home, these tips are designed to help you keep your brokerage safe and your reputation strong.

How to secure your devices and network

Here are some helpful ways to strengthen your digital setup:

  • Choose strong passwords, update them regularly, and store them securely (never physically). Avoid reusing the same password across different platforms.
  • Enable multi-factor authentication wherever possible, especially for email, CRM, and banking platforms.
  • Keep software and antivirus tools up to date to protect against the latest threats.
  • Avoid using public Wi-Fi for sensitive tasks. If you must, use a secure VPN.
  • Lock your devices when stepping away, even for a moment.

Spotting scams before they hit

  • Check email addresses carefully. Scammers often use addresses that look almost identical to legitimate ones.
  • Be cautious with urgent or unexpected requests. If something doesn’t feel right, call the person directly to confirm and always double-check the contact details they provide. If you're unsure, look them up independently.
  • Avoid clicking on suspicious links or downloading unexpected attachments.
  • Watch for spelling errors, strange formatting, or unusual tone in messages.

If you’re ever unsure, trust your instincts and verify before acting.

What to do if something goes wrong

If you think your business has been compromised:

1. Disconnect affected devices from the internet.
2. Change passwords immediately across all platforms.
3. Notify your IT support or provider to investigate.
4. Report the incident to Scamwatch and IDCARE.
5. Let your clients know if their data may have been exposed.
6. Notify the lender if you’re worried that any customer information may be impacted.

Quick action can limit the damage and help you recover faster.

Staying ahead of AI-driven scams

Scams are evolving fast, and artificial intelligence is making them harder to spot. From cloned voices to hyper-realistic phishing emails, AI tools are being used to impersonate brokers, clients, and even lenders. That’s why staying informed and proactive is more important than ever.

A new wave of AI-powered phishing scams is targeting Australians by impersonating well-known companies. Recent data from Gen Digital2 shows a 186% surge in breached personal information, a 466% spike in phishing reports, and a 17-fold increase in fake browser update scams, all within the first quarter of 2025.

These scams are becoming more convincing and more frequent, making it more important than ever to stay vigilant.

Here are some helpful ways to protect your brokerage from AI-powered threats:

  • Verify beyond digital. If something feels off, like a sudden account change or urgent request, confirm it through a second channel. A quick phone call can prevent a costly mistake.
  • Educate your clients. Share simple red flags to watch for, like unusual payment requests or messages that feel rushed or out of character. A short email from you could save them thousands.
  • Strengthen your digital hygiene. Use multi-factor authentication, update passwords regularly, and be mindful of what you share online – especially on social media or public forums.
  • Stay connected with your partners. Lenders and aggregators (including Pepper Money) are constantly improving cyber protections. Make use of the tools, alerts, and training available to you and your clients.

By staying alert and sharing your knowledge, you’re not just protecting your business – you’re building trust and helping clients feel safe in a digital-first world.

Helping your clients stay safe too

  • Share simple tips like never sharing personal details over email or text, and always verifying requests for money transfers.
  • Use secure platforms when submitting documents.
  • Send occasional reminders to avoid clicking unknown links and to double-check account details before making payments.
  • Offer to be their first call if they’re unsure about a message, email, or phone call.
  • Reassure them that their lender and broker are working together to keep their information safe.
  • Point them to our Customer Security Hub for more support and resources.

A final checklist for brokers

Here’s a quick checklist to help keep your brokerage secure:

  • Strong, unique passwords in place
  • Multi-factor authentication enabled
  • Software and antivirus up to date
  • Scam awareness training for your team
  • A response plan ready in case of a breach
  • Make sure the platforms you are using to support your customers are secure.
  • Regular IT system and cybersecurity audits

Need more support?

Pepper Money is here with helpful resources to keep you and your clients safe. If you have questions or want to learn more, reach out to your BDM or visit our Security Hub.

Frequently asked questions

Look for unusual sender addresses, spelling mistakes, unexpected attachments, or urgent requests for personal or financial information. If in doubt, don’t click — verify the sender through a trusted channel.

Disconnect affected devices from the internet, change all passwords, contact your IT support, and report the incident to Scamwatch and IDCARE. Let clients know if their data may have been exposed.

Antivirus software is a good start, but it’s not enough on its own. Combine it with strong passwords, multi-factor authentication, regular updates, and scam awareness training for your team.

Absolutely! We encourage brokers to share our really helpful resources with clients to help them stay safe online. You’ll find these on our Security Hub.

Enable multi-factor authentication on all key platforms, including email, CRM, and banking. It’s one of the simplest and most effective ways to protect your accounts.

Daily backups are recommended. They should be encrypted and stored securely, ideally offsite or in the cloud. This ensures you can recover quickly if your systems are compromised.

Information provided is factual information only and is not intended to imply any recommendation about any financial product(s) or constitute tax advice. If you require financial or tax advice you should consult a licensed financial or tax adviser. Applications are subject to credit assessment, eligibility criteria and lending limits. Terms, conditions, fees and charges apply.

© Pepper Money Limited ABN 55 094 317 665; AFSL and Australian Credit Licence 286655 (“Pepper”). Pepper is the servicer of home loans provided by Pepper Finance Corporation Limited ABN 51 094 317 647.  Pepper Asset Finance Pty Limited ACN 165 183 317 Australian Credit Licence 458899 is the credit provider for asset finance loans.

Invested in your success

Helping you assist all kinds of clients. Talk to us today.