Settlement money is the prize
Once inside one mailbox, an attacker can quietly watch a matter, then email your client "updated" trust account details days before settlement. The money can be gone in minutes. How the scam works
Your firm holds confidential matters, identity documents and money on its way to settlement. That makes it a target, and the attack is rarely clever. It's one convincing email asking a client to pay into "new" account details. We look after your computers, email and security so your fee-earners get on with the work, and you can show clients they're protected.
Melbourne-based · for small and mid-size firms, sole practitioners and conveyancing practices.
Trusted by growing Melbourne businesses
Trusted by Completed Books, Jacmor Engineering, IronGroup Lawyers, Brolec, CommsPlus Distribution, Groundbreaker Property Group, Citywide Signs, Crib Civil, By George Legal, Protech Civil and Alkira Bio.Client money, confidential matters, ID documents. Nobody has to break in cleverly to get at them. One mailbox is enough.
Once inside one mailbox, an attacker can quietly watch a matter, then email your client "updated" trust account details days before settlement. The money can be gone in minutes. How the scam works
In 2024 the VLSB+C set minimum cybersecurity expectations for the firms it regulates: multi-factor sign-in, backups you can restore, staff who spot scams, and a plan for when something goes wrong. Depending on the circumstances, gaps can be relevant to a professional-conduct assessment. The expectations in plain English
In our September 2026 study of Melbourne law firms, 958 of 1,246 (76.9%) hadn't enforced protection against email that pretends to come from their own domain. That's the gap the settlement scam walks through. Read the study
We work with the practice software you already use, whether that's LEAP, Actionstep, Smokeball or something else, and keep it running and secure wherever your team works.
Monitoring and updates run in the background, and patches go on outside your working hours. When a computer won't cooperate the morning of a filing or a settlement, you call a real person who knows your setup. Managed IT support
Multi-factor sign-in on email and practice software, scam-email filtering, protected computers, staff training and a written incident plan. The things the VLSB+C expects, actively managed all year. Cyber security
We switch on the email settings that stop criminals sending mail that looks like it came from your firm, and help your team build the "phone before you pay" habit. Microsoft 365 set up properly and backed up, so a deleted folder isn't a disaster. Microsoft 365 · Backup
Practical automation for the repetitive jobs: matter intake, document requests, registry searches, moving data between systems. Your lawyers get their hours back. Automation
We hold the same recognised security standard ourselves, at Level 3 (Gold), so the bar we set for your firm is the one we keep for our own.
They integrated and automated our systems beautifully. Tasks that used to take hours now just happen on their own.
BG LegalLegal services
A Melbourne law firm of ten-plus people started with shared passwords, sign-in gaps and an unsupported server. Four months later it was certified Level 3 (Gold) against a recognised Australian security standard. We still manage it today. Read the case study
A boutique firm was hand-collecting data from two government registries every week. We automated the whole job in a one-week project. About six hours of skilled staff time came back each week, roughly $37,000 a year at the firm's own staffing rate. Read the case study
Book a free 30-minute Security Scorecard. No system access, no obligation. We score where you stand against a recognised standard and hand you a prioritised fix list to keep. You'll leave with at least three fixes you can use yourself, even if we never work together.
In 2024 the Victorian Legal Services Board and Commissioner set minimum cybersecurity expectations for the firms it regulates. They cover the basics: multi-factor sign-in, backups you can restore, staff who can spot a scam, sensible access control and a written plan for an incident. Depending on the circumstances, failing to manage cyber risk can be relevant to whether conduct amounts to unsatisfactory professional conduct or professional misconduct. This isn't legal advice on your obligations, so check the detail with your professional body or adviser.
Two layers. The tech: multi-factor sign-in on every mailbox, scam-email filtering, and the email settings that stop criminals sending mail that looks like it came from your firm. The habit: tell clients in writing that your account details won't change by email, and confirm any new payment details by phoning a number you already have. We set up the first and help your team build the second.
Yes. Whether you run LEAP, Actionstep, Smokeball or something else, we look after the computers, sign-ins, email and network around it, and we deal with the software provider when something needs their help.
Managed support is a predictable fixed monthly fee, based on your team size and what you need. The free Security Scorecard comes first, so you get a clear plan and a clear price before you commit to anything.
Yes. We're based in Greensborough and come on-site across Melbourne. Most issues we fix remotely and fast, and when something genuinely needs hands on it, we come to you.
We also look after accountants and advisers, private practices and medical centres, and provide managed IT support and cyber security across Melbourne. See where we work.