Blog/WhatsApp & mobile money

Training Shop Staff to Spot Payment Fraud

A short routine for cashiers and sales staff: confirm every payment, never reverse or refund without the owner, ignore callers giving instructions, and report quickly.

CyberWatch AI3 October 2026 · 2 min read
A card terminal at a supermarket checkout

Staff at the counter are the front line against payment fraud. A few clear rules, practised once or twice, give them the confidence to pause when something does not feel right.

The five-rule routine

  1. Confirm every payment on the business wallet or terminal, not the customer's screen. See fake payment alerts.
  2. No refunds or reversals without the owner or manager. See refund scams.
  3. Ignore phone instructions from "the owner", "head office" or "the provider" to send money or share codes. Call the owner back on a known number.
  4. Never share the business PIN or approve prompts from callers. See approval prompts.
  5. Report quickly, even if it was a mistake.

Practice scenarios

  • A customer shows a "payment successful" screen and is in a hurry.
  • A caller says he is the owner's brother and needs money sent urgently.
  • A buyer "overpaid" and wants change sent to another number.
  • A card payment fails and the customer offers to "try again" repeatedly. See POS tricks.

Make pausing easy. Tell staff clearly that calling you is always the right choice, even if it means losing a sale.

For more, see mobile money and banking scams.

Frequently asked questions

How long should staff training take?

A 15-minute briefing when someone starts, plus a quick reminder whenever a new trick appears.

What should staff do when unsure?

Pause the sale politely and call the owner or manager. Losing a sale is better than losing goods and money.

Should staff be blamed for being tricked?

No. Blame makes people hide mistakes. Focus on quick reporting and better routines.

Sources

  1. Small organisations guide to cyber security, UK National Cyber Security Centre
  2. Cybersecurity for Small Business, US Federal Trade Commission
  3. How To Spot, Avoid, and Report Fake Check Scams, US Federal Trade Commission
Share this article
LinkedIn WhatsApp X
For organizations

Your people get these messages at work too.

CyberWatch AI sends your staff realistic practice attacks, trains the gaps it finds, and shows management exactly where the organization stands.