The $20,000 Email: How a Hacked Inbox Can Drain Your Bank Account Overnight

Picture this: you get back from a well-earned vacation, log into online banking to catch up on things, and discover $20,000 has vanished from your business bank account overnight.

No warning. No red flag from the bank. Just gone.

If you’re confident that could never happen to your business, we’d gently push back — because we see this exact scenario play out at businesses across the GTA on a regular basis. And it never involves a break-in, a dodgy bank employee, or anyone stealing your online banking password.

All it takes is a hacker getting into one person’s email account.

Why email is the weak point

Email is the number one way small businesses get robbed, and it’s rarely dramatic. Hackers who get into an inbox don’t usually announce themselves — they quietly set up a hidden forwarding rule and sit back, reading everything that comes and goes.

Given enough time, a pattern emerges: the same supplier, invoicing the same amount, on the same date every month. That’s the opening they’ve been waiting for.

The moment the real invoice lands, the attacker sends a “quick follow-up” — a near-identical email with “updated bank details,” timed to arrive right after the genuine one. Whoever processes payments sees two emails that look related, updates the record to make life easier, and pays the invoice straight into the hacker’s account.

By the time anyone notices, the money — and usually the hacker’s trail — is gone.

Inside Email Hijack: The $20,000 Email

We wrote this free ebook to walk through exactly how this scam works, using the story of David — a fictional business owner whose company is targeted with precisely this kind of attack while he’s away on vacation.

David’s story is fiction. The mechanics behind it are not. We’ve watched real GTA businesses go through almost this exact chain of events — the discovery, the fallout, and the fix — and wrote this so you don’t have to learn it the hard way.

What you’ll learn

• How a single compromised inbox can lead straight to a stolen bank payment — no stolen banking credentials required
• The most common ways hackers set up and exploit a hijacked email account, from hidden forwarders to spoofed domains and edited invoice PDFs
• Why hackers now target every business automatically rather than picking specific victims, and what that means for a business your size
• The layers of email security we use to protect our own clients, and how to find the right blend for your business without burying your staff in friction
• Why a five-minute pause before acting on a “new bank details” email can save you tens of thousands of dollars