The attack looks like an ordinary phone call
A fake banker or support worker knows the right terminology, follows a credible script and can create a sense of urgency.
[ Fraud, vishing and social engineering ]
Scammers are not looking for a flaw in the system. They are looking for the right human response.
Modern fraud is more than a suspicious phone call. Attackers combine fake bankers, compromised accounts, authority, time pressure and technical tricks to persuade a client or employee to make a decision that cannot be undone. The training shows how today's scams work, how to recognise them and how to respond correctly.
[ Today's financial scams ]
A scam starts with a believable story. It ends with a real financial loss.
Attackers exploit situations in which people react faster than they can verify. They impersonate a bank, technical support or someone close to the victim, gradually steering them towards transferring money, installing an app or handing over sensitive information.
Scammers work like an organised company
Attacks may be carried out by groups with defined roles, their own call centres, technical support and prepared communication scripts.
Psychological pressure bypasses security habits
Fear, authority and time pressure lead people to act before verifying the situation.
Technical myths get in the way of effective prevention
Attention often focuses on unrealistic scenarios, while the real risks are relay attacks, weak passwords or inadequately protected documents.
[ Training outcomes ]
Participants will know how to recognise a scam, interrupt it and explain it clearly to a client.
01
They will recognise a scammer's scenario
Click to learn more →01
They will know the typical stages of a call, the arguments used and the warning signs.
← Back02
They will resist pressure to make a quick decision
Click to learn more →02
They will learn to break the psychological pressure and verify the situation safely.
← Back03
They will be able to advise clients
Click to learn more →03
They will know how to explain clearly what the real risk is and which steps make sense.
← Back04
They will uncover weaknesses in everyday processes
Click to learn more →04
They will understand the risks of weak passwords, protected documents and procedures that create a false sense of security.
← Back[ Audience ]
For people who work with clients, payments or security incidents
The training is designed for staff who need to recognise today's fraud scenarios, respond correctly and provide clear help to clients. No technical knowledge is required.
[ Suitable for ]
- Bank and financial institution employees
- Client service and contact centres
- Personal bankers and financial advisers
- Complaints and fraud teams
- Compliance and security staff
- Leaders of client-facing and operations teams
[ Course content ]
From organised scam centres to protecting a client in a specific situation
We tailor the emphasis of topics and examples to the type of institution, participants' roles, internal processes and the most common fraud scenarios.
01Today's world of financial fraud
- Fraud statistics in the Czech Republic and their financial impact
- Organised groups, call centres, forced labour and double scams
- Real examples of attacks and police interventions
- Why banks are the most common targets
02AI-based defence and the Alenka project
- AI models for detecting scammers
- How models keep scammers occupied
- Active threat hunting and disruption of scam portals
03The most common fraud scenarios
- The “Hi Mum…” WhatsApp scam
- Emergency calls from “relatives”
- Fake bankers and safe accounts
- IT support scams impersonating Microsoft or Apple
04Psychology and dark patterns in communication
- Fear, authority and time pressure
- Dark patterns in communication
- Defence and prevention
05NFC attacks: reality and myths
- The most common myths about card cloning
- How relay attacks work
- What clients can actually do
06Passwords and document security
- Cracking weak passwords in practice
- Why common patterns can be cracked in minutes
- Demonstration of cracking a protected PDF
- Recommended practices and process changes
[ Training format ]
Real cases, live demonstrations and decisions under pressure
The training combines current cases, technical demonstrations and communication psychology. Participants explore fraud from the perspective of the attacker, the client and the institution.
01
Real fraud scenarios
Click to learn more →01
Participants will see how scammers establish contact, build trust and gradually change a victim's behaviour.
← Back02
Demonstrations of techniques and tools
Click to learn more →02
The training includes demonstrations of weak passwords, protected documents and the technical workings of selected attacks.
← Back03
Communication psychology
Click to learn more →03
The training explains why authority, urgency and fear work, and how to break that pressure safely.
← Back04
Discussion and questions
Click to learn more →04
Participants can relate each principle to client situations and their own organisation's processes.
← Back[ Practical information ]
A short, intensive format tailored to your institution
We adapt the content and examples to the type of institution, participants' roles, internal processes and the fraud scenarios you encounter most often.
- Format
- In person
- Duration
- 1.5–2.5 hours
- Number of participants
- 5–30 people
- Prerequisites
- None
- Price
- From CZK 45,000
- Customisation
- Based on the type of institution, participants' roles, internal processes and the most common fraud scenarios
- Wrap-up
- Practical recommendations, discussion and Q&A
[ Your trainer ]
Pavel „SPAJK“ Matějíček
Pavel “Spajk” Matějíček is a cybersecurity trainer and consultant at BOIT. He has worked in cybersecurity for over 10 years, focusing on user security awareness, social engineering prevention and practical protection of company data in everyday operations. Previously, he worked at ESET, helping educate people about cyber threats.
In his training, he explains things clearly, without unnecessary technical jargon, using real-world situations. He shows participants how attackers think, which techniques they use and how to defend against them effectively.
[ Why BOIT ]
We connect the technical workings of an attack with its real impact on people
We draw on real attacks
We show the scenarios, techniques and communication methods scammers actually use.
We separate real risks from myths
Participants will understand what to focus on and which common beliefs distract from effective prevention.
We explain technical principles clearly
No prior knowledge is required. We always connect demonstrations to their practical impact on the client or institution.
We turn recommendations into actionable steps
Participants take away procedures they can use when communicating with clients and making their own decisions.
[ Client experiences ]
BOIT training combines expertise with practical, clear delivery
Pavel's cybersecurity training has the pace of an ice hockey game: fast, practical and full of involvement. Participants aren't spectators: they're active players. No boredom, just clear insights they can use straight away.
Accolade has worked with Pavel for several years. His proactive approach makes his training one of our most popular and best-attended sessions, engaging people across generations.
We've worked with BOIT on information security talks for a long time. Pavel combines excellent expertise with an entertaining style. In over 10 years of organising specialist events, BOIT has been one of our best partners. Highly recommended.
[ FAQ ]
What you need to know before booking
01Is the training only for banks?
No. Banks and financial institutions benefit most, but it is also useful for other organisations whose employees work with clients, payments or suspicious situations.
02Do participants need technical knowledge?
No. We explain technical principles clearly and always connect them to a specific situation and practical defence.
03Does the training include real examples of scams?
Yes. We use real scenarios, examples of attacks, scammers' communication methods and demonstrations of selected technical risks.
04Can the content be adapted to our internal processes?
Yes. We adapt the content and examples to the type of institution, participants' roles, internal processes and the fraud scenarios you encounter.
05Is the training available online?
We offer this training in person. The face-to-face format allows for live demonstrations, discussion and responses to the group's questions.
06How long does the training last?
The training lasts 1.5 to 2.5 hours. We agree the exact duration based on the required scope and emphasis of each topic.
07How much does the training cost?
Prices start at CZK 45,000. The final quote depends on the scope and level of customisation for the particular institution.