Accountants — Is your client data protected against AI-powered fraud?

Three UK regulators confirmed it officially this week: AI is giving fraudsters tools that beat any skilled human attacker — and the one task every business owner can do today takes 20 minutes and costs nothing.

Accountants — Is your client data protected against AI-powered fraud?

The FCA, Bank of England, and HM Treasury issued a joint warning this week: AI-powered attacks now outpace what a skilled human criminal could do alone, running faster and at far greater scale. Your practice holds tax returns, payroll records, and banking credentials for dozens of clients — one successful break-in exposes all of them. Turn on multi-factor authentication on your practice email and accounting software (Xero, QuickBooks, Iris) this week, then use ChatGPT to draft a short note to your clients explaining what you've done. That conversation gets ahead of the question they'll ask next month.

Trades — Are you ready for AI-generated fake invoices?

Fake payment requests that used to look obviously wrong now arrive reading exactly like your bank or your regular materials supplier — because AI writes them convincingly at scale, according to the FCA and Bank of England's joint warning this week. If your business email runs on Google Workspace or Microsoft 365, search "turn on 2-step verification" and follow the guide — your whole team can have it live before lunchtime. While you're there, ask ChatGPT to write a two-minute explainer on what a suspicious invoice looks like. That's your cyber training done, free, in 15 minutes.

Retail & Hospitality — Are you getting real value from the AI tools you're already paying for?

No fresh news hit your sector this week, which makes it a good moment to get more from what you already have. If your business uses Google Workspace, Gemini is already available in your Docs and Gmail: this week, use it to draft responses to your last five Google reviews. A thoughtful reply to a one-star review — live within an hour of it landing — does more for your customers' trust than most marketing spend. Switch on AI-suggested replies in your Google Business Profile while you're there; it's free and takes three minutes to activate.

Agencies — Is your client data safe against AI-assisted account takeovers?

The joint warning from the FCA, Bank of England, and HM Treasury wasn't aimed at agencies, but your client briefs, contracts, and campaign files sit in your shared drives — and AI-assisted account takeovers are hunting exactly this kind of business. Switch on two-factor authentication on your team's accounts today; it's the single fastest security improvement your agency can make this week. Separately: if you're not already using Claude or ChatGPT to turn raw meeting notes into polished client status updates, time yourself doing one today — that's your benchmark for what the tool is actually worth to you.

Professional Services — What does the AI cyber warning mean for your compliance obligations?

If you run a regulated practice — legal, surveying, financial advisory, healthcare — the FCA, Bank of England, and Treasury's joint statement this week is a direct compliance prompt. Regulators now expect security arrangements to keep pace with AI-assisted threats; if your setup hasn't been reviewed in 12 months, that's an exposure worth discussing with your IT provider this week. Separately, if your practice pays for Microsoft 365, Copilot for Word is already in your toolkit and most small business owners on that plan haven't opened it yet — use it this week to draft a first-pass advice note from a precedent and see how much time it saves.

Manufacturing & Wholesale — Are your accounts team protected against AI-generated supplier fraud?

Regulators warned this week that AI-generated impersonation emails targeting payment flows are now more convincing than ever — a real concern for any manufacturing or wholesale business running regular supplier payments. Brief your accounts team now: use ChatGPT to draft a one-page guide on spotting fake payment requests, built around your actual supplier list. It takes ten minutes to produce and could prevent a costly misdirected payment. On tools: if your business carries significant stock, this month is a good time to look at AI demand forecasting — Inventory Planner and Linnworks both offer free trials built for businesses your size.

Money on the table this week

No major grant windows opened this week that are relevant to most SMBs — the two grants in today's feed are earmarked for court-service organisations and a Leeds property developer. The reliably open route is HMRC's R&D Tax Credits scheme for SMEs: if your business has spent time or money making a process work better — automating a task, improving forecasting, or testing new tools — ask your accountant whether that spend qualifies. The claim window runs two years back, and if you've recently started using any AI tool to solve a genuine business problem, that conversation is worth having this week rather than next.

Bottom line

Turn on two-step login on your work email and accounting software before you close your laptop today — because according to the FCA, Bank of England, and HM Treasury, AI has made the attacks heading toward your business this year considerably harder to spot than anything that came before.

That's today's briefing. Subscribe free to get this in your inbox every morning.