FOLSOM, Calif. — Nov. 3, 2026 — Stech Group, a business technology company based in Folsom, CA is issuing a phishing warning for Sacramento-area businesses after three clients reported compromised bank accounts following clicks on links in emails that appeared legitimate during the past week.
The company has not identified the affected clients, their banks or any amounts involved. The methods used have not been independently established. The reported incidents highlight the risks posed by emails that imitate trusted organizations and people to direct recipients to websites that may collect account credentials.
"Three clients came to us in one week after clicking email links they believed were legitimate and then discovering problems with their bank accounts," said Timothy, CSE at Stech Group. "Our message to business owners is to verify unexpected requests through a known phone number or a website they enter themselves, especially when banking information is involved."
The Federal Trade Commission warns that phishing emails can impersonate banks, suppliers, invite requests from friends and other familiar organizations. Messages may claim an account requires immediate action, contain an invoice or prompt the recipient to confirm payment information. A recognizable sender name does not establish that a message is authentic.
The FBI's Internet Crime Complaint Center reported approximately $3 billion in losses attributed to business email compromise nationwide in 2025. That category covers a range of fraud schemes involving business communications and does not establish that the three reported incidents involved the same technique.
Stech Group advises Sacramento-area employers to remind staff not to enter passwords or banking details after following unexpected email links. Employees should confirm payment instructions and account-change requests using contact details already on file, not those supplied in a message. Businesses should also enable multifactor authentication, review account alerts and limit access to financial systems.
Anyone who suspects a bank account has been compromised should contact the bank immediately using an independently verified number, ask about securing accounts and reversing unauthorized transfers, and preserve relevant emails and transaction records. Affected organizations should change exposed credentials from a trusted device and report suspected internet fraud to the FBI's IC3. If malicious software may have been installed, the FTC recommends scanning the device before using it for sensitive activity.
The warning applies to businesses across the Sacramento region, including those with no prior history of cybersecurity incidents. Stech Group said it is sharing the recent reports to encourage caution when processing emails involving sensitive accounts.