// Banks · Insurers · FCA-Regulated Firms · Accountancies
BEC fraud, CEO impersonation, and wire transfer scams target your people — not your firewalls. PhishShield gives you measurable evidence of human risk reduction, aligned to FCA, PCI-DSS, and ISO 27001.
$2.9B
lost to BEC attacks in the US alone (FBI IC3 2023)
£11M+
largest FCA fine for cyber control failures
77%
of organisations targeted by spear-phishing in 2023
// Simulations
Generic templates don't reflect the attacks targeting financial services. Our templates mirror real BEC campaigns and regulatory impersonation attacks observed in the UK market.
// Platform
CEO fraud, CHAPS/BACS instruction intercepts, DocuSign contract phishing, HMRC tax refund lures, and FCA/PRA impersonation — the exact attacks your staff face.
Target high-risk individuals with personalised simulations using their name, role, and organisation details — the same technique real attackers use against payments teams.
Increasingly required by insurance underwriters and large corporate clients. PhishShield guides you through certification with full documentation support.
Identify your highest-risk employees by department, seniority, or role. Focus training budget on the people who handle payments, client data, or system access.
One-click evidence packs aligned to FCA operational resilience rules, PCI-DSS security awareness requirements, and ISO 27001 control documentation.
No client financial data is ever used. Full GDPR-compliant data processing agreement and SOC 2-aligned security controls.
// Compliance
FCA Operational Resilience
PS21/3 requires firms to demonstrate human risk controls. Phishing simulation records are direct evidence for your Important Business Services assessment.
PCI-DSS Requirement 12.6
Phishing simulations satisfy PCI-DSS Requirement 12.6.3 — periodic testing to verify that staff can identify and respond to social engineering attempts.
Cyber Essentials
Required by an increasing number of financial services clients and insurance underwriters as a baseline cyber hygiene certification.
ISO 27001 — A.6.3
Documented security awareness training is a mandatory control under Annex A.6.3 of ISO 27001:2022. PhishShield generates the evidence automatically.
// Customer outcomes
“Our FCA operational resilience review specifically asked about phishing controls. PhishShield gave us the audit trail we needed on day one.”
Jonathan F.
Chief Risk Officer · FCA-regulated asset manager
“CEO fraud nearly cost us £180k. After running three PhishShield campaigns, our payments team now catches every simulation. Confidence in our human controls has never been higher.”
Caroline B.
Head of Information Security · Regional building society
// Get started
Wire transfer fraud, CEO impersonation, and invoice scams start with a single employee clicking the wrong link. Measure your exposure today.