The single most effective control against invoice and royalty payment fraud is a firm rule that no change to bank details is ever actioned on an email alone. Always confirm it by phone on a number you already hold, never one from the message. Back that with strong email security, multi-factor authentication and staff training, and you shut down the way these scams work.
Music and entertainment accountants handle royalties, fees and payments to and from well-known clients, which makes them a prime target for the scam known as business email compromise. Criminals pose as a client, a supplier or a colleague and ask for funds to go to a new account. Here’s how to protect your practice and your clients’ money.
1. Verify every change of bank details
Make it standard procedure: any request to change payment details, from a client, a supplier or internally, is verified by calling a known contact before anything is paid. Write it down, train everyone on it, and make sure no one feels pressured to skip it because a message looks urgent.
2. Secure your email
Most of these attacks arrive by email or follow a hacked mailbox. Managed filtering, anti-impersonation controls, a quarantine process and multi-factor authentication on every account make it far harder for a criminal to get in or convincingly pose as someone you trust.
3. Train your team to pause
These scams rely on urgency and routine. Short, regular training and simulated phishing teach staff to stop and check when a payment request feels even slightly off, which is often the only thing standing between a busy team and a costly transfer.
4. Watch for the warning signs
Account monitoring can flag a compromise in progress, such as new mailbox forwarding rules or logins from unexpected places. Spotting these early can stop a scam before any money moves.
A real example: a London music accountancy firm
We support a London music and entertainment accountancy firm whose whole team works securely from home with no disruption, running CCH, document management (FYI and INVU), QuickBooks and payroll software day to day. Security is layered with ThreatLocker application allowlisting, access restricted by location, managed email filtering and proactive patching, so the practice stays focused on a busy, growing client book instead of on IT. When something does come up, it’s resolved on a single phone call.
For a London accountancy practice serving music and entertainment clients, this is part of managed IT and security that usually costs about £45 to £100 per user per month, scaling with headcount, your hosted desktop or CCH setup, and the security your high-profile clients expect.
Why London music accountancy firms choose First Stop IT
First Stop IT has supported businesses since 2002, including London music and entertainment accountancy firms, and we know the software your practice runs every day: CCH, QuickBooks, payroll software (including QTAC), and document management with FYI and INVU. Our credentials include:
- Cyber Essentials Certified
- IASME Cyber Assurance (Gold)
- NCSC Assured Service Provider (Cyber Advisor for Cyber Essentials)
- Microsoft Partner
- Crown Commercial Service Supplier (G-Cloud)
- Quality Principles Certified
We look after more than 2,000 endpoints across 50 companies, we’ve been named a Top 50 UK MSP for three years running, and we support practices across Essex, Hertfordshire and London, including Harlow and Bishop’s Stortford.
Book a free IT and cyber security review
Want to protect your practice and your clients from payment fraud? Book a free IT and cyber security review with First Stop IT and we’ll check your email security and your payment process.