Protecting your brokerage online:
A helpful guide to cyber safety

At Pepper Money, we know brokers are busy helping customers find solutions that fit. But in today’s digital world, protecting your business online is just as important as protecting your clients’ financial wellbeing.
In 2024 alone, Australians lost over $2 billion to scams1.
That figure includes individuals and businesses, with brokers increasingly targeted due to the sensitive financial data they handle. That’s why we’ve created this helpful guide to help you stay secure, spot scams early, and respond quickly if something goes wrong.
Whether you’re working from the office, on the go, or from home, these tips are designed to help you keep your brokerage safe and your reputation strong.
How to secure your devices and network
Here are some helpful ways to strengthen your digital setup:
- Choose strong passwords, update them regularly, and store them securely (never physically). Avoid reusing the same password across different platforms.
- Enable multi-factor authentication wherever possible, especially for email, CRM, and banking platforms.
- Keep software and antivirus tools up to date to protect against the latest threats.
- Avoid using public Wi-Fi for sensitive tasks. If you must, use a secure VPN.
- Lock your devices when stepping away, even for a moment.
Spotting scams before they hit
- Check email addresses carefully. Scammers often use addresses that look almost identical to legitimate ones.
- Be cautious with urgent or unexpected requests. If something doesn’t feel right, call the person directly to confirm and always double-check the contact details they provide. If you're unsure, look them up independently.
- Avoid clicking on suspicious links or downloading unexpected attachments.
- Watch for spelling errors, strange formatting, or unusual tone in messages.
If you’re ever unsure, trust your instincts and verify before acting.
What to do if something goes wrong
If you think your business has been compromised:
Quick action can limit the damage and help you recover faster.
Staying ahead of AI-driven scams
Scams are evolving fast, and artificial intelligence is making them harder to spot. From cloned voices to hyper-realistic phishing emails, AI tools are being used to impersonate brokers, clients, and even lenders. That’s why staying informed and proactive is more important than ever.
A new wave of AI-powered phishing scams is targeting Australians by impersonating well-known companies. Recent data from Gen Digital2 shows a 186% surge in breached personal information, a 466% spike in phishing reports, and a 17-fold increase in fake browser update scams, all within the first quarter of 2025.
These scams are becoming more convincing and more frequent, making it more important than ever to stay vigilant.
Here are some helpful ways to protect your brokerage from AI-powered threats:
- Verify beyond digital. If something feels off, like a sudden account change or urgent request, confirm it through a second channel. A quick phone call can prevent a costly mistake.
- Educate your clients. Share simple red flags to watch for, like unusual payment requests or messages that feel rushed or out of character. A short email from you could save them thousands.
- Strengthen your digital hygiene. Use multi-factor authentication, update passwords regularly, and be mindful of what you share online – especially on social media or public forums.
- Stay connected with your partners. Lenders and aggregators (including Pepper Money) are constantly improving cyber protections. Make use of the tools, alerts, and training available to you and your clients.
By staying alert and sharing your knowledge, you’re not just protecting your business – you’re building trust and helping clients feel safe in a digital-first world.
Helping your clients stay safe too
- Share simple tips like never sharing personal details over email or text, and always verifying requests for money transfers.
- Use secure platforms when submitting documents.
- Send occasional reminders to avoid clicking unknown links and to double-check account details before making payments.
- Offer to be their first call if they’re unsure about a message, email, or phone call.
- Reassure them that their lender and broker are working together to keep their information safe.
- Point them to our Customer Security Hub for more support and resources.
A final checklist for brokers
Here’s a quick checklist to help keep your brokerage secure:
- Strong, unique passwords in place
- Multi-factor authentication enabled
- Software and antivirus up to date
- Scam awareness training for your team
- A response plan ready in case of a breach
- Make sure the platforms you are using to support your customers are secure.
- Regular IT system and cybersecurity audits
Need more support?
Pepper Money is here with helpful resources to keep you and your clients safe. If you have questions or want to learn more, reach out to your BDM or visit our Security Hub.
Frequently asked questions
Look for unusual sender addresses, spelling mistakes, unexpected attachments, or urgent requests for personal or financial information. If in doubt, don’t click — verify the sender through a trusted channel.
Antivirus software is a good start, but it’s not enough on its own. Combine it with strong passwords, multi-factor authentication, regular updates, and scam awareness training for your team.
Absolutely! We encourage brokers to share our really helpful resources with clients to help them stay safe online. You’ll find these on our Security Hub.
Enable multi-factor authentication on all key platforms, including email, CRM, and banking. It’s one of the simplest and most effective ways to protect your accounts.
Daily backups are recommended. They should be encrypted and stored securely, ideally offsite or in the cloud. This ensures you can recover quickly if your systems are compromised.