Security awareness training for your staff
A workshop at your premises: live demos on our own devices, practice with the scam emails Belgian businesses receive, and clear rules your staff can apply the next morning. For small businesses, offices, hotels and local councils.
Local · In writing in Dutch, French or English · All-in-one · Free intake
Local · In writing in Dutch, French or English · All-in-one · Free intake
Try it yourself
Find the five signals in this email
This is how invoice fraud usually starts: a 'supplier' announces a new bank account. Click everything that looks suspicious to you. It is the same exercise we do with your staff in the workshop.
- From
- Zandlo Linen Service
- To
- Subject
0 of 5 found
Click whatever looks suspicious in the email.
- 1Not found yet
- 2Not found yet
- 3Not found yet
- 4Not found yet
- 5Not found yet
Run a hotel? The CCB warned about fake payment requests sent through Booking.com. What you can do
What the security training covers
- Invoice and CEO fraud: how a changed bank account or an 'urgent payment from the boss' reaches your accounts team, and the one phone call that stops it
- Phishing and fake login pages: reading the address, not the logo, and what to do after a wrong click
- Live demos on our own devices: cloning a simple access badge, taking over an insecure camera, what a stray USB stick can do
- Passwords and two-step login: which accounts need it first, explained without jargon
- Optional phishing test beforehand: staff are told a test will run, and you get a team result without names
A good fit for
- Small businesses whose staff handle invoices, bookings or customer data
- Offices and professional firms: accountants, notaries, agencies
- Hotels and restaurants, where the front desk reads every email
- Local councils and public services
- Businesses that already had a close call and want to prevent the next one
Many incidents at small businesses start with an ordinary email: an invoice with a new bank account, or a login page that looks right. Staff who have seen one up close are more likely to recognise the next.
In the workshop we show the attack as it happens, on our own equipment: a simple access badge cloned in seconds, an insecure camera taken over, a USB stick that types commands on its own. Then we practise with scam emails from your own sector. If you want, a harmless phishing test runs first; your staff know it is coming and you get the result for the team as a whole, never a list of names.
We finish with a few agreements that fit how your business works: who checks a changed bank account, where a suspicious email goes, what to do after a wrong click. The workshop is meant for small businesses, offices and hotels in Ninove, Aalst, Ghent and across Belgium.
Read moreShow less
See also: invoice fraud checklist, free email security check and network management and guest Wi-Fi.
The figures
What is happening in Belgium
- Over 3.6 million
- phishing cases were reported to the CCB in the first quarter of 2026.
- VRT NWS, 7 April 2026, CCB figures
- 215
- invoice fraud reports reached the FPS Economy in 2024, with more than €3.3 million in damage.
- FPS Economy, 9 October 2025
Figures checked on .
Your bank now helps
Since 9 October 2025 your bank checks, for every euro transfer, whether the name matches the account number. If you get a warning, don't pay until you have called the supplier on a number you already had.
Printable invoice fraud checklistFree check
Can someone send email in your company's name?
Two settings of your domain, SPF and DMARC, decide whether mail servers stop a forged email with your address. Enter your domain and see where you stand straight away.
We only read public DNS data and do not keep your domain name or the result.
How we work
1
First meeting
We look at how you work: who pays invoices, which accounts matter, what has gone wrong before
2
Phishing test (optional)
Announced to staff, harmless, reported for the team as a whole
3
Workshop on site
Live demos, then practice with real examples, planned around your opening hours
4
Agreements and follow-up
A one-page checklist for staff and a short list of actions for you; a repeat test later if you want one
What you get
- A one-page checklist your staff keep: how to spot the signals, and what to do
- A written rule for changed bank accounts: always a call-back on a known number
- One reporting route everybody knows, including suspicious@safeonweb.be
- A short action list for the owner: which accounts get two-step login first, what to back up
- If you chose the test: the team result before and after, without names
Get started
Custom quote, no obligation. First a free 30-minute online call, then we come on site if it's needed. You get a written price before any work.
Who comes to your place
Aman Yadav
Founder of Fluxive
You deal with the same person from the first appointment until after the handover, with no call centre in between. Conversations are in English.
- Brusselstraat 90
9400 Ninove - Company no. 1029.968.269
Check the public register - +32 472 92 57 41
Good to know
Frequently asked questions
What is a phishing simulation?
It is a controlled test where we send your staff a harmless fake phishing email, the kind a real scammer would send. You get the result for the team as a whole: how many clicked and how many reported it, never a list of names. The point is to show where the risk is and to train your team to spot the real thing next time.
Is running a phishing simulation on my staff safe and legal?
Yes, when it is done properly with your agreement as the employer. Your staff are told beforehand that a test will run during a set period, the test emails do no harm, and results are reported per team, not per person. That follows the safeguards Belgian law expects when an employer looks at staff communications, and the GDPR. If you have a works council, a prevention committee or a union delegation, informing them is your step as the employer; we prepare a short note you can use. For a municipality or another public body the rules differ: your data protection officer should confirm the legal basis before a test.
What is NIS2 and does it apply to me?
NIS2 is a European cybersecurity law, in force in Belgium since 18 October 2024. It applies to organisations in the sectors the law lists with at least 50 full-time staff, or more than €10 million in both turnover and balance sheet. Most hotels, restaurants and small offices fall outside it. Larger customers who are covered may still ask about your security, and the CCB's free test on Safeonweb@work tells you where you stand.
Who is this training for and what does it involve?
It is built for local councils and small and medium businesses whose staff are not IT specialists. It combines a live demo of how attacks work with a plain-language session, so your people know what to watch for, without scaremongering. On request it also includes a phishing simulation that your staff are told about in advance.
We're a small business: are we really a target for hackers?
Yes, mostly because attackers do not pick you personally: phishing is sent out in bulk and lands at small businesses, restaurants and local councils just as easily as at multinationals. The difference is that a small team rarely has an IT department watching over it, which is exactly where basic awareness pays off most.
How much of my team's time does this take? We can't miss a full day.
The phishing test takes almost none of your staff's time: the email arrives in their normal inbox while they work. The workshop is planned around your opening hours, and its length depends on the group; it is written in the quote before you agree.
Is this a one-off session, or do you come back?
That is up to you. Awareness fades over time, so you can repeat the test after a few months and compare the team result. That is your choice each time; there is no subscription.
How we run a phishing test, and what we never do: read our rules
Free first steps
Where does your business stand today?
The Centre for Cybersecurity Belgium (CCB) gives small businesses free tools. You can start today, with or without us.
- 01
Take the self-assessment
A CCB questionnaire that shows where your business stands. No registration needed.
To the self-assessment - 02
Do the quick wins
The CCB's Quick Wins: a short list of cheap measures that stop a lot of attacks.
To the Quick Wins - 03
Request the free Quick Scan
After registering on Safeonweb@work, the CCB scans your website, email and network from the outside. Once every three months, report within 72 hours.
About the Quick Scan - 04
Pick a CyberFundamentals level
The Belgian framework of concrete measures. The Small level is meant as a starting point for small organisations.
About CyberFundamentals
Where we help
We go through the self-assessment with you, read the Quick Scan report together and put the first measures in place. We don't issue a label or certificate: only an accredited conformity assessment body can.
Does NIS2 apply to you?
Usually not. The Belgian NIS2 law applies from 50 full-time staff, or more than €10 million in both turnover and balance sheet, in the sectors the law lists. A hotel, restaurant or small office is usually outside it. Larger customers who are covered may still ask you about your security.
Take the test on Safeonweb@workRelated reading
DMARC in four weeks: reach p=reject without blocking your own mail
87.0% of Flemish hotel email domains give receiving servers no instruction to block a forged email in their name. This four-week plan takes a small hotel or business from no DMARC, or p=none, to p=reject, fixing one sender at a time and checking that booking confirmations, invoices and the newsletter still arrive.
Read moreFake Booking.com payment requests: what a hotel can do
Guests receive a payment request with their real booking details, apparently from the hotel's own account. What the CCB and Microsoft have reported, what Booking.com says it never asks, and what reception and the owner can do.
Read moreExplore related services
IT Services & Wi-Fi Installation for SMEs
Wi-Fi installation and IT services for hotels, restaurants and SMEs in Belgium. We measure where your signal drops and design a network for busy buildings, so guests and staff stay connected.
AI Automation & Custom Tools
AI chatbots and business automation built around how you work: internal apps (like a housekeeping tool), ordering and 'AI waiter' flows, and accounting and admin automation. Custom AI for hospitality and SMEs that takes repetitive work off your team.