A field guide to phishing in the food supply chain

Phishing remains the front door for the overwhelming majority of incidents in the food sector, and procurement is a favourite target — invoices, shipping notices and supplier updates are the daily bread of the inbox.

Attackers mimic exactly this traffic. A fake change-of-bank-details email costs nothing to send and can redirect a six-figure payment.

This guide (attached) walks through the most common lures seen across CSAFI member reports and the simple verification habits — a phone call to a known number, a second approver — that defeat them.