--- title: "Business Email Security in South Africa: A Practical Guide for SMEs" description: How South African SMEs can secure business email against phishing, invoice fraud and account takeover — plain steps, real costs and POPIA duties. image: https://www.cyber-guard.co.za/hubfs/business-email-security-south-africa.png --- ![](https://www.cyber-guard.co.za/hubfs/raw_assets/public/@marketplace/kalungicom/atlas-theme/images/Logoipsum.svg) - [PRODUCT](https://www.cyber-guard.co.za/product) - [PRICING](https://www.cyber-guard.co.za/pricing) - [RESOURCES](https://www.cyber-guard.co.za/resources) - [BLOG](https://www.cyber-guard.co.za/blog) - [ABOUT](https://www.cyber-guard.co.za/about) SIGN IN GET A DEMO # Business Email Security in South Africa: A Practical Guide for SMEs How South African SMEs can secure business email against phishing, invoice fraud and account takeover — plain steps, real costs and POPIA duties. [Jayson](https://www.cyber-guard.co.za/cyber-guard-blog/author/jayson) Oct 14, 2026 --- **Business email security means stopping criminals from getting into your mailboxes, impersonating your domain, or tricking your staff through email.** For a South African SME, the essentials are multi-factor authentication (MFA) on every mailbox, SPF, DKIM and DMARC on your domain, advanced email filtering, protection on every device, and a firm rule that payment changes are confirmed by phone. Together these block the large majority of email-based attacks. Email is where most attacks on small businesses start. Sophos's 2026 *State of Ransomware in South Africa* report found that phishing and malicious email cause more than a third of local ransomware incidents. INTERPOL's 2026 Africa cyberthreat report placed South Africa at roughly 70% of business email compromise detections on the continent. ## Why do criminals target South African business email? Your mailbox holds everything a fraudster needs: client lists, quotes, invoices, who approves payments, and how your team writes. Once inside, attackers often wait quietly for weeks, then send one perfectly timed "new banking details" email from your real address. Small businesses are attractive because they usually have: - No dedicated IT security person - Shared or reused passwords and no multi-factor authentication - Default email settings that let anyone spoof the domain - Staff who process payments based on email instructions Kaspersky's recent research found nearly eight in ten South African SMBs had a cyber incident in the past year, with business email compromise affecting 18% of them. ## What are the main email threats to SMEs? 1. **Phishing:** fake login pages or attachments that steal passwords or install malware. 2. **Business email compromise (BEC):** a real mailbox is taken over, or a lookalike address is used, to redirect payments. 3. **Domain spoofing:** emails that appear to come from your exact domain because SPF and DMARC aren't set up. 4. **Malware and ransomware attachments:** "invoices", "delivery notes" and CVs carrying malicious files. 5. **Account takeover:** stolen passwords bought or guessed, then used to log in from anywhere in the world. ## How do I secure my business email? 7 steps 1. **Turn on multi-factor authentication for every mailbox.** This single step stops most password-based takeovers. Use an authenticator app rather than SMS where possible. 2. **Publish SPF, DKIM and DMARC records.** These tell receiving mail servers which systems may send email for your domain. Start DMARC at `p=none` to monitor, then move to `quarantine` or `reject`. 3. **Add advanced email filtering.** Microsoft 365 and Google Workspace catch obvious spam, but targeted phishing and new malware need an extra layer that scans links and attachments. 4. **Protect every device that opens email.** A laptop or phone with outdated software is a common way in. Sophos found user devices were the entry point in 43% of South African attacks that didn't start with email. 5. **Make a payment-change rule.** Any change to bank details, by a supplier or a client, is confirmed by phone on a number you already have. Write it into your processes and onto your invoices. 6. **Train staff briefly and often.** Five minutes a month on real examples beats a once-a-year slide deck. 7. **Monitor and respond.** Someone needs to notice impossible logins (Johannesburg at 9:00, Lagos at 9:05) and lock the account fast. Not sure how exposed your email is? Our free cyber risk assessment shows where your business is exposed, including your email and domain set-up. [Get my free risk assessment](https://www.cyber-guard.co.za/free-risk-assessment) ## Do Microsoft 365 or Google Workspace already protect my email? Partly. Both include spam filtering and offer MFA, but MFA is often not switched on, DMARC is not configured, and the default filtering misses targeted attacks. Most SMEs also have no one watching the security alerts these platforms generate. ## What does POPIA require for email security? POPIA section 19 requires reasonable technical and organisational measures to protect personal information, and mailboxes full of client and staff details are covered. If a mailbox is compromised, section 22 requires you to notify the Information Regulator, through its online eServices portal, and the people affected. The Regulator can issue administrative fines of up to R10 million. ## How much does business email security cost? Cyber Guard's managed plans start at **R69 per user per month**. Email protection is included from the Business plan (R85), and Complete (R99) adds Microsoft 365 and cloud protection. Every paid plan includes a cyber warranty of up to R1,000,000, underwritten by Hollard. Plans are month-to-month, with a minimum of 5 users. A 20-person business on Business pays R1,700 a month. [Compare all plans](https://www.cyber-guard.co.za/pricing). ## How Cyber Guard protects your business email Cyber Guard is a Johannesburg-based managed security provider powered by Trend Micro. We set up and watch over your email and devices so you don't need an in-house IT team: - [Email security](https://www.cyber-guard.co.za/solutions/email-security) that blocks phishing, fake invoices and business email compromise before they reach your inbox - Microsoft 365 and Google Workspace protection against account takeover - Endpoint and mobile protection on every laptop, desktop and phone - 24/7 detection and response by Trend Micro AI and the Cyber Guard team - A [cyber warranty](https://www.cyber-guard.co.za/cyber-warranty) of up to R1,000,000 that helps pay for recovery if an attack still gets through - No hardware, no contract, and usually protected within 48 hours Try Cyber Guard free for 30 days Up to 25 devices. No card needed. Choose a plan or let it expire. [Start my free trial](https://www.cyber-guard.co.za/free-trial-1) ## Frequently asked questions ### What is the most important email security step for a small business? Turning on multi-factor authentication for every mailbox. It blocks most account takeovers that start with a stolen password. ### What is DMARC and do I need it? DMARC is a DNS record that tells other mail servers what to do with email that fails authentication for your domain. Without it, criminals can easily send email that appears to come from you. ### Can I be hacked if I use Microsoft 365? Yes. Microsoft 365 is secure infrastructure, but weak passwords, no MFA and missing DMARC are configuration gaps that attackers exploit every day. ### Is a hacked mailbox a POPIA breach? If personal information in it was accessed by an unauthorised person, yes. You must notify the Information Regulator and the affected people as soon as reasonably possible. ### How quickly can Cyber Guard protect my email? Most businesses are fully protected within 48 hours. Protection installs remotely on each device, and we connect your email and Microsoft 365 or Google Workspace. No hardware is needed. *Sources: [Sophos, The State of Ransomware in South Africa 2026 (via Daily Investor)](https://dailyinvestor.com/?p=157497); [INTERPOL African Cyberthreat Assessment 2026 (via IOL)](https://iol.co.za/news/crime-and-courts/2026-08-04-south-africa-named-africas-cybercrime-hotspot/); [Kaspersky SMB research (via Zawya)](https://www.zawya.com/en/economy/south-africa-smbs-face-rising-cybersecurity-risk-as-social-engineering-tops-incidents-477837).* ## Similar posts ## Worried about your business's cyber security? Tell us a little about your business and one of our Johannesburg-based security specialists will contact you within one business day. No obligation, no sales pressure. [Book my free risk assessment](https://www.cyber-guard.co.za/free-risk-assessment) [or start a 30-day free trial →](https://www.cyber-guard.co.za/free-trial-1) Prefer to talk? Call [+27 68 918 3511](tel:+27689183511) ![](https://www.cyber-guard.co.za/hubfs/raw_assets/public/@marketplace/kalungicom/atlas-theme/images/Logo-White.svg) Company 1234 5th AVE N. Seattle, WA 98101 ### Product - Login - Overview - Another one - Meetings - Action Items ### Solutions - Team meetings - Remote meetings - Another one - Functional - Executive ### Resources - Blog - Podcast - Templates - Newsletter - Help center ### Company - Blog - Podcast - Templates - Newsletter - Help center © 2020 Company All rights reserved Privacy Policy [Powered by Atlas - a B2B SaaS HubSpot theme](https://www.kalungi.com/atlas-hubspot-theme-for-b2b-saas-software) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Jayson", "url" : "https://www.cyber-guard.co.za/cyber-guard-blog/author/jayson" }, "dateModified" : "2026-10-14T07:06:15.839Z", "datePublished" : "2026-10-14T07:06:15.000Z", "headline" : "Business Email Security in South Africa: A Practical Guide for SMEs", "image" : [ "https://www.cyber-guard.co.za/hubfs/business-email-security-south-africa.png" ], "mainEntityOfPage" : { "@id" : "https://www.cyber-guard.co.za/cyber-guard-blog/business-email-security-in-south-africa-a-practical-guide-for-smes", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.cyber-guard.co.za/hubfs/Copy%20of%20CYBER%20GUARD%20Racing%20%20(Website).png" } } } ```