Most tradie business owners don’t realise how exposed they are online.
This is not because they lack sophisticated IT systems, but rather because scammers no longer require sophisticated methods to infiltrate them.
In Episode 476 of The Site Shed, Matt sits down with Ronnie Manning from Yubico, a global leader in authentication security, to uncover how scammers use AI, phishing, and weak login practices to infiltrate small businesses…
And what tradies like you can do to protect yourselves today.
A small mistake across social media, banking, or job management platforms can lead to a major security breach.
👨💻 The Real Reason Small Businesses Are Getting Hacked
A common belief among tradies is:
“Why would anyone bother going after a small business like mine?”
According to Ronnie, this assumption is one of the biggest dangers.
Scammers aren’t looking for big targets.
They’re looking for easy targets.
And the reality is:
- Small businesses rarely have IT support
- Owners and staff reuse passwords across multiple accounts
- Admin access is shared informally
- MFA is often switched off
- Old devices and browsers aren’t updated
This combination makes small trade businesses the perfect entry point for cybercriminals using automated tools and AI-driven phishing campaigns.
🔧 Weak Passwords: The #1 Entry Point for Cybercriminals
Throughout the episode, both Matt and Ronnie highlight how often breaches start with the simplest issue:
The same password is used everywhere.
Scammers use software that can:
- Guess weak passwords in seconds
- Test your password across hundreds of platforms
- Break into your personal account, then pivot into your work accounts
Ronnie explains that modern password managers instantly solve this problem by creating long, complex, and unique passwords for each login while securely storing them across your devices.
The beauty?
You’ll never have to memorise them again.
Password managers also allow teams to share logins without revealing the actual password.
🔒 Why MFA Is the “Seat Belt” of Cybersecurity
One of the strongest messages in this episode is the importance of multi-factor authentication (MFA).
Ronnie puts it simply:
“You don’t appreciate a seat belt until you need it… and MFA works the same way.”
MFA dramatically reduces the chance of an account being compromised because even if a hacker guesses your password, they still can’t get in without a verification code, a device approval, or a hardware key.
It’s a minor inconvenience that prevents massive damage, especially for high-risk accounts like email, banking, job management software, social media admin access, or Google Workspace or Microsoft 365 accounts.
Yet most breaches in trade businesses happen because MFA wasn’t turned on.
🔑 Passkeys & Security Keys: The Future of Login Protection
Passwordless authentication is now one of the strongest security upgrades available to small businesses.
Ronnie explains how passkeys and physical authentication keys (like YubiKeys) provide phishing-resistant protection by removing passwords entirely.
Instead of typing a password, the login is verified through:
- A cryptographic “key pair”
- A physical hardware key
- A device-bound approval system
Scammers can’t phish or steal what doesn’t exist.
This makes it one of the most secure methods available.
Major platforms such as Facebook, Google, Microsoft, and X (formerly Twitter) now support passwordless login and passkeys.
For trade businesses, this simplifies team access, eliminates password resets and credential theft, lowers IT overhead, and secures core business systems.
🤖 AI Is Supercharging Scams, And It’s Targeting Small Businesses
One of the most alarming insights Ronnie shares is how AI is creating believable fake emails, login screens, text messages, phone calls, and websites.
These phishing attempts no longer look amateur. They look real, personalised, and urgent.
Scammers rely on emotional triggers like:
- “Your account has been suspended”
- “There is an issue with your payment”
- “Click here to avoid late fees”
Ronnie explains that even Gen Z, known as the most tech-literate generation, is falling for phishing scams at a rate of 62%.
This implies that busy tradesmen who are rushing between jobs are even more susceptible.
🚪 The “Back Door” Problem: Inconsistent Security Levels
Ronnie uses a memorable analogy:
“Your business might have excellent security in one area… but a completely unprotected back door elsewhere.”
For example, you’re still at risk if you have a strong password on your email but a weak password on your social accounts, no MFA on your bank login, or if a team member is still using “Admin123”!
Hackers only need one unlocked door.
This is why Matt and Ronnie emphasise consistent cybersecurity hygiene across all accounts, not just your most important ones.
🔐 Simple Cybersecurity Upgrades You Can Put in Place This Week
So, how can a tradie like you who is not yet well-versed in this area implement it?
Ronnie outlines several practical, low-cost steps that every trade business can implement immediately:
1. Turn on MFA everywhere
If an account offers MFA, activate it.
2. Use a password manager
Eliminate reused or predictable passwords.
3. Update browsers and apps
Updates often address critical vulnerabilities. Ignoring them is risky.
4. Stop sharing passwords through text or email
Use secure sharing inside your password manager.
5. Move towards passkeys or hardware keys
This step alone can eliminate most phishing threats.
6. Audit who has access to what
Remove old team members, revoked contractors, or unused logins.
These improvements don’t require an IT department.
They only require awareness and the willingness to act.
Cybersecurity Isn’t Technical… It’s Essential
Cybersecurity is no longer an enterprise issue.
It’s everyday business hygiene.
The digital threats facing trade businesses are real, growing, and becoming more and more advanced. These include AI-powered scams and stolen admin logins.
But as Ronnie shows, the solutions are inexpensive, simple, quick to implement, and accessible to every business.
Your trade business doesn’t need to be a cybersecurity expert.
You just need the right habits, the right tools, and a proactive mindset.
If you rely on digital tools (and every modern tradie does), then protecting your accounts is protecting your reputation, your money, and your customers.
📚 Resources from this Episode
- Yubico Website
- Get in touch with Ronnie Manning
Email: [email protected]
Want to unlock your business's hidden potential?
Ready to build a smarter, more scalable business?
👉 Book a free strategy call – let’s design your digital operations roadmap and get you moving faster.
