Accountants — Is your client portal secure enough now AI is running the attacks?

UK regulators put AI-powered cyberattacks on the record this week — and that shifts one practical task to the top of your to-do list this weekend, whatever sector your business is in.

Accountants — Is your client portal secure enough now AI is running the attacks?

The FCA, Bank of England, and Treasury published a joint statement this week confirming that AI tools can now conduct cyberattacks faster and at greater scale than any skilled human practitioner. Your practice holds the most dangerous combination of data on the high street — client bank credentials, HMRC login details, payroll records — which makes it a priority target. Switch two-factor authentication on for your practice software and client portal this week, then use ChatGPT to draft a short note to clients explaining the upgrade. That message turns a security task into a client communication win, and it's worth sending before they ask the question.

Trades — Do you know whether your young drivers actually have valid insurance?

The FCA warned this week that nearly half of 17–25-year-old drivers have bought car insurance through social media or messaging apps, and thousands of those policies are fraudulent. If one of your apprentices has an accident while driving for your job and their policy turns out to be fake, the liability sits with your business — ask to see a policy document from a named insurer before they drive for you. On a separate note: AI call-handling tools like Synthflow answer out-of-hours job enquiries automatically, which also reduces the risk of your staff giving out personal mobile numbers to strangers.

Retail & Hospitality — Does your team know what an AI-generated fake invoice looks like?

UK regulators confirmed this week that AI tools are being used to run payment fraud and account-takeover attempts at a scale that wasn't possible twelve months ago — your booking platform, cloud till, and supplier email chain are all entry points. Two things worth doing this week: switch two-step verification on for your business email and your booking software, then use ChatGPT to draft a one-paragraph briefing for your team. The message is simple: if any supplier requests a bank-detail change by email, call them back on a number you already have before transferring anything.

Agencies — When your clients ask about AI security this summer, what will you say?

The joint statement from the FCA, Bank of England, and Treasury will reach your financial services, legal, and healthcare clients within weeks — and they will ask whether their data is safe with you. Get ahead of it this week: use Claude to build a one-page data-handling summary from your existing contracts and privacy policy in about twenty minutes. That document becomes a pitch asset, a retention tool, and an early answer to the question your largest client's procurement team is about to ask.

Professional Services — AI attacks are now on the regulatory record. Is your cyber insurance keeping up?

The FCA, Bank of England, and Treasury stated plainly this week that AI-powered attacks now outpace what a skilled human practitioner could do — and that statement is public record. When a client asks what precautions your firm has taken, "I didn't know" no longer holds. Before your policy renews, check whether your cyber insurance explicitly covers AI-enabled attacks; many older policies predate this threat class entirely. Use Microsoft Copilot in Word this week to run through your supplier contracts for data-handling clauses — an audit that takes days manually takes an afternoon with Copilot open.

Manufacturing & Wholesale — Has your accounts payable team been briefed on AI-generated fake invoices?

The practical risk from this week's regulatory warning is specific: AI tools can now generate convincing fake supplier invoices at volume, and your AP team is the intended target. One process change worth making this week — any payment instruction arriving by email, even from a known address, gets verbally confirmed before transfer. Use ChatGPT to draft a one-paragraph briefing for your team covering what to look for: spoofed sender domains, mismatched account numbers, and pressure to act fast.

Money on the table this week

No major grant rounds opened for UK SMBs this week. Two standing options are worth checking: Innovate UK's smart-factory stream has historically offered up to £200k per project for manufacturers adopting AI or automation on the shop floor — check their website for the current open round. Help to Grow: Digital provides discounts of up to 50% on approved software for eligible retail and hospitality businesses. If either fits your sector, speak to your local Growth Hub now rather than when a deadline appears — adviser capacity fills well before application windows close.

Bottom line

Every sector this week points to the same starting move: find the two-factor authentication setting you haven't switched on yet, do it this weekend, and use an AI tool to tell your team or clients about it before the week starts.

That's today's briefing. Subscribe free to get this in your inbox every morning.