Follow Us
Join our newsletter
Get the latest news delivered to your inbox.
Preparing for the New Form I-9
August 9, 2023
The U.S. Department of Homeland Security’s (DHS) Citizenship and Immigration Services (USCIS) recently announced the release of an updated Employment Eligibility Verification form (Form I-9) and instructions. The updated Form I-9 will be available to employers starting August 1, 2023; however, the prior version of Form I-9 (Revised October 21, 2019) continues to be effective through October 31, 2023.
After October 31, employers who continue to use the outdated Form I-9 will be subject to penalties.
The revisions to the form and its instructions are intended to streamline the documents and reduce the burdens associated with the form for employers and employees.
The DHS also issued a final rule to become effective on Aug. 1, 2023, which will amend agency regulations to allow for the authorization of alternative document examination procedures, such as remote documentation verification and examination. The new rule is designed to increase flexibility and improve the agency’s ability to respond to emergencies, such as a pandemic similar to COVID-19.
These announcements have been long-awaited after previous extensions of the existing form and temporary COVID-19 flexibilities allowing remote verification. As these changes will impact all employers, now is a critical time to ensure that organizations are familiar with them, review their Form I-9 practices and make any necessary adjustments. Accordingly, this article provides employers with an overview of the changes to Form I-9 and remote document verification and outlines strategies to help employers prepare for the new form.
Form I-9 Overview
The Immigration Reform and Control Act of 1986 (IRCA) requires all employers, regardless of size, to hire only individuals who may legally work in the United States. To comply with the law, employers must verify each individual's identity and employment authorization by completing and retaining the Form I-9.
Form I-9 Updates
The USCIS released the following updates to Form I-9:
- Reduced Sections 1 and 2 to a single sheet;
- Moved the Preparer/Translator Certification area from Section 1 to a standalone supplement (Supplement A);
- Moved the Reverification and Rehire area from Section 3 to a separate supplement (Supplement B);
- Replaced the use of “alien authorized to work” with “noncitizen authorized to work;”
- Clarified the difference between “noncitizen national” and “noncitizen authorized to work;"
- Ensured the form can be downloaded easily and filled out on tablets and mobile devices;
- Eliminated the requirement to enter “N/A” in certain fields;
- Revised the notice that explains how to avoid discrimination in the Form I-9 process;
- Updated the List of Acceptable Documents page to include guidance and links to information on automatic extensions of employment authorization documentation and some acceptable receipts; and
- Added a check box to use if the employee’s Form I-9 documentation was examined under a DHS-authorized alternative procedure rather than a physical examination.
Additionally, the USCIS updated Form I-9’s instructions. These updates include the following:
- Reduced the instruction’s length from 15 pages to eight pages;
- Included definitions of key actors in the Form I-9 process;
- Simplified the steps each actor takes to complete their section of the form;
- Added instructions for the use of the new checkbox for employers who choose to examine Form I-9 documentation under an alternative procedure; and
- Eliminated the abbreviations charts and moved them to the USCIS’ Handbook for Employers.
Completing the Updated Form I-9
To comply with employment eligibility verification requirements, employers can use the updated Form I-9 starting August 1, 2023. Employers do not need to complete the new form for current employees with a properly completed Form I-9 on file unless reverification applies after October 31, 2023.
Employers may continue using the prior version of the form through October 1, 2023. The USCIS is allowing employers this additional time to make necessary updates and adjustments to their business processes. After October 1, 2023, the prior version of Form I-9 will be obsolete and no longer valid. Starting November 1, 2023, employers who fail to use the updated form may be subjected to all applicable penalties under section 274A of IRCA. Employers may download the current version of the form on the USCIS’ website. Starting August 1, 2023, the new form will be available on the USCIS’ website.
Preparing for the Updated Form I-9
Complying with Form I-9 requirements is often challenging and places a large administrative burden on employers.
Failing to complete and retain Forms I-9 for all employees can be extremely costly. Under the IRCA, employers can be subjected to fines for not complying with Form I-9 guidelines, accepting fraudulent documents when verifying an employee’s identity and employment eligibility, and discriminating against individuals based on their citizenship status or national origin.
Additionally, Form I-9 violations often can lead to additional fines and penalties from other government agencies.
While the required timelines for completing Forms I-9 for employees haven’t changed, the updated form will likely force employers to make some changes to their Form I-9 operations and processes; therefore, it’s critical that employers familiarize themselves with the new form and its changes so they can ensure an efficient and effective Form I-9 process and avoid costly penalties. Employers can consider the following strategies to help ensure they meet the Oct. 31 deadline and comply with Form I-9 requirements.
Remote Document Verification
The USCIS also announced a final rule in the Federal Register recognizing the end of temporary COVID-19 flexibilities on July 31, 2023. The final rule also provides the DHS the authority to authorize optional alternatives for employers to examine Form I-9 documentation.
Under current requirements, employers must physically inspect Form I-9 acceptable documents to certify that their employees are authorized to work in the United States; however, with the final rule, the DHS also published an accompanying document in the Federal Register providing employers enrolled in E-Verify the option to remotely examine their employees’ identity and employment authorization documents under a DHS authorized alternative procedure.
The remote verification option will not be available to employers unless they enroll in E-Verify.
To participate in the remote examination of Form I-9 documents under the DHS-authorized alternative procedure, employers will need to:
- Be enrolled in E-Verify;
- Examine and retain copies of all documents;
- Conduct a live video interaction with the employee; and
- Create an E-Verify case if the employee is a new hire.
Employers who were participating in E-Verify and created a case for employees whose documents were examined during COVID-19 flexibilities (March 20, 2020, to July 31, 2023) may choose to use the new alternative procedure starting on August 1, 2023, to satisfy the physical document examination requirements by August 30, 2023. Employers not enrolled in E-Verify during the COVID-19 flexibilities must complete an in-person verification by August 30, 2023.
Form I-9 requirements impact all employers; therefore, with these fast-moving and even confusing changes, now is a critical time for employers to review their Form I-9 processes. By understanding Form I-9 requirement changes and the implementation timelines, employers can better prepare to comply with these new requirements.
Contact SimcoHR today for additional Form I-9 resources or questions.
Sign up for our newsletter.
Cybercriminals continue to evolve their tactics, making phishing attacks more sophisticated and harder to detect. Every day, countless phishing emails reach inboxes, often with the intent to steal sensitive information or spread malware. Unfortunately, many of these attacks succeed in just a matter of seconds— the median time for users to fall for phishing emails is less than 60 seconds according to the 2024 Verizon Data Breach Investigations Report . With stolen credentials being one of the most popular methods of attack, businesses face increasing risks as these types of cyber threats become more complex and dangerous. How Phishing and Spoofed Domains Work Phishing attacks aim to trick employees into revealing sensitive information, often through: Fraudulent Email Links – These emails appear to be from trusted sources but contain malicious links that install malware or steal login credentials. Look-Alike Domains – Hackers create fake websites that resemble real business portals, altering a single character in the domain (e.g., “micr0soft.com” instead of “microsoft.com”). Credential Theft – Once hackers obtain login credentials, they sell them on the dark web, leading to widespread data breaches. Red Flags: How to Identify a Phishing Email Unusual Sender Addresses – Cybercriminals often spoof email addresses to look like trusted sources. Carefully inspect the sender's domain name for typos, extra characters, or strange formatting. A genuine email from "paypal.com" could be faked as "paypall.com" or "paypal-support.com." Urgent or Threatening Language – Many phishing emails attempt to create a sense of urgency, claiming that an account will be suspended, a payment has failed, or legal action is imminent. If an email pressures you into immediate action, be suspicious. Unexpected Attachments or Links – Hover over hyperlinks before clicking to see the actual URL destination. If the web address looks unfamiliar or mismatched with the sender's identity, do not click. Similarly, attachments that appear out of context—especially ZIP files, PDFs, or Word documents—could contain malware. Requests for Sensitive Information – Legitimate organizations will never ask for passwords, Social Security numbers, or banking details via email. If an email requests confidential information, verify with the company directly using a trusted phone number. Generic Greetings or Poor Grammar – Emails that start with “Dear Customer” instead of your name, or those containing awkward phrasing and misspellings, often indicate phishing attempts. Many cybercriminals operate internationally and use machine translations, leading to unnatural wording. Best Practices to Protect Your Business Train Employees Regularly – Frequent security awareness training helps employees recognize phishing attempts. Past studies by Proofpoint show that companies with ongoing cybersecurity training reduce phishing-related breaches by up to 60%. Implement simulated phishing tests to reinforce learning. Enable Multi-Factor Authentication (MFA) – MFA significantly decreases the chances of an account being compromised, even if login credentials are stolen. Microsoft reports that MFA can block over 99% of automated cyberattacks . Ensure all employees activate MFA for business accounts. Verify Requests Independently – If an email asks for sensitive actions (e.g., wire transfers, login changes, or software downloads), confirm the request through a known and trusted contact method. Never use the phone number or link provided in the email —instead, visit the company's official website or call using a verified number. Monitor and Filter Emails – Implement robust email security tools that automatically flag suspicious messages. Advanced filtering systems, like those offered by Barracuda Networks, can block over 90% of phishing emails before they reach inboxes. Encourage a Report-First Culture – Employees should feel empowered to report suspicious emails even if they are unsure. IT teams can analyze these reports to strengthen cybersecurity measures. Early detection prevents widespread damage. Use a Password Manager – Employees often reuse passwords across multiple accounts, increasing security risks. Encourage the use of password managers like 1Password or LastPass to generate and store complex passwords securely. New Tactic: The Rise of QR Code Phishing ("Quishing") QR code phishing, or "quishing," is a new phishing tactic gaining momentum as attackers exploit the widespread use of QR codes. Unlike traditional phishing, which relies on malicious email links, quishing uses QR codes to redirect users to fake websites designed to steal login credentials. Several factors contribute to quishing's success: Ubiquity : QR codes are now commonly used for payments, tickets, and documents, reducing suspicion when they appear in emails. Minimal Text : Unlike traditional phishing emails, quishing messages often contain little text, making them harder for security systems to flag. Mobile Vulnerability : QR codes are scanned on personal devices, which typically lack the protection of corporate systems. According to Abnormal Security , 90% of quishing attacks involve credential phishing , where users are tricked into entering sensitive data. Another common tactic is using fraudulent MFA alerts, which account for 27% of attacks , while 21% involve fake document-signing requests . Final Thoughts At the end of the day, protecting your company from phishing and cyber threats requires more than just technology—it’s about the people behind it. By fostering a culture of awareness and encouraging open communication, you empower your employees to be the first line of defense. Together, with vigilance and the right tools in place, you can ensure the safety of your sensitive data and build a more secure future for your business.
Employee Appreciation Day, which falls on March 7th this year, is an ideal occasion to express gratitude for the hard work and dedication of your employees. At Simco, we recognize that employee appreciation shouldn’t be limited to just one day, but this day presents a special opportunity to go above and beyond in showing your team how much they mean to the success of your organization. When employees feel recognized and valued, it enhances morale, engagement, and ultimately, productivity. Here are several thoughtful and impactful ways to celebrate Employee Appreciation Day, creating lasting positive effects for both your employees and your company. 1. Personalized Appreciation Nothing shows employees you truly value them more than personalized recognition. Tailor your appreciation efforts to each individual, acknowledging their unique contributions and the impact they’ve made. Personalized gestures help employees feel recognized for the specific work they’ve done, making the appreciation feel authentic and meaningful. You can: Write Personalized Thank-You Notes : Take the time to write handwritten notes to your employees, thanking them for their specific achievements and how they contribute to the company’s overall success. Publicly Acknowledge Contributions : During a company meeting or via a group email, recognize each team member's individual contributions, celebrating their efforts with concrete examples. Employee Spotlights : Feature standout employees in your internal newsletter or on social media to highlight their unique strengths and hard work. 2. Host an Engaging Celebration Employee Appreciation Day is an excellent time to host a celebration that brings everyone together, whether virtually or in person. A well-planned event can boost morale and provide a chance for employees to connect with one another outside of their usual work routines. Ideas for celebration include: Catered Meals or Special Treats : Provide lunch, snacks, or a special treat to make the day feel celebratory. A fun lunch or dessert bar can offer an opportunity for employees to mingle and bond. Themed Events : Host a fun, themed event such as a retro office party or a “thank you” happy hour where employees can unwind and enjoy themselves. Virtual Celebration : For remote or hybrid teams, set up a virtual event like a game or trivia session where employees can engage and laugh together. 3. Offer Tangible Tokens of Appreciation While a simple thank-you is powerful, offering a meaningful gift can take employee appreciation to the next level. Thoughtful rewards can show your team that you not only recognize their hard work but are also willing to invest in their well-being. Consider: Gift Cards : Offer gift cards to popular retailers, restaurants, or online stores, allowing employees to pick out something they personally enjoy. Wellness Incentives : Gifts that promote health and wellness—such as fitness trackers, yoga classes, or access to mental health resources—show employees you care about their overall well-being. Company Merchandise : High-quality, branded merchandise like apparel, accessories, or tech gadgets can serve as a lasting reminder of your appreciation. 4. Invest in Professional Development One of the most meaningful ways to honor your employees is by helping them grow professionally. Employee Appreciation Day is a great time to invest in their future, whether through formal training, new opportunities, or fostering leadership skills. Ways to offer growth opportunities include: Learning Stipends : Offer financial support for employees to pursue further education, certifications, or online courses that align with their career goals. Internal Development Programs : Launch mentorship initiatives or leadership programs that enable employees to expand their skill sets within the organization. Growth Opportunities : Encourage employees to explore new roles or responsibilities that align with their career aspirations, reinforcing your commitment to their long-term success. 5. Encourage Peer Recognition Employee appreciation doesn’t have to be a one-way street from management to employees. Encouraging peer-to-peer recognition helps build a strong team culture, where employees feel supported and valued by their colleagues as well. This helps foster camaraderie and teamwork, which benefits the entire organization. Ideas for peer recognition: Peer-to-Peer Appreciation Platforms : Create an internal platform where employees can nominate or thank their colleagues for their contributions, highlighting specific ways they've gone above and beyond. Recognition Wall : Set up a virtual or physical wall where employees can post messages of appreciation for their peers, encouraging a culture of gratitude. Monthly Recognition : Implement a peer-nominated “Employee of the Month” program to recognize and reward employees for their ongoing contributions. 6. Give Back Employee Appreciation Day also provides an opportunity to show gratitude by giving back to the community. Many employees value working for companies that have a strong sense of corporate social responsibility. By organizing a charitable event or initiative, you demonstrate that your organization cares about making a positive difference beyond the workplace. Ideas for giving back include: Company Volunteer Days : Organize a day of service where employees can volunteer at a local charity or nonprofit, allowing them to contribute to causes they care about while bonding with their colleagues. Matching Donations : Offer to match employee donations to their favorite charities, demonstrating that you support their personal values and causes. Charitable Fundraising Events : Host fundraising activities or auctions with proceeds going to a charitable organization chosen by the team. 7. Seek Feedback Finally, a key part of showing appreciation is listening to your employees and gathering feedback on how they feel valued. Employee Appreciation Day offers the perfect occasion to ask for input on what makes them feel appreciated and what could be improved. This helps ensure that future efforts are even more meaningful. Ways to gather feedback: Anonymous Surveys : Send out a survey asking employees what makes them feel most appreciated and if they have any suggestions for improving recognition practices. One-on-One Check-ins : Arrange individual meetings with employees to hear their thoughts on workplace culture and recognition, providing an opportunity for honest feedback. Cultivating a Culture of Appreciation Year-Round Employee Appreciation Day is a special occasion, but the benefits of recognizing your team should last well beyond this single day. When employees feel consistently valued and appreciated, it leads to higher morale, greater job satisfaction, and increased engagement. By investing in recognition efforts, offering meaningful rewards, and fostering a culture of appreciation, you ensure that your team remains motivated, happy, and productive all year long. At Simco, we believe that lifting and supporting employees is integral to creating a thriving workplace. Whether you celebrate Employee Appreciation Day with gifts, events, or personalized recognition, taking the time to show gratitude is a small gesture that can have a lasting impact on both your employees and your business.
As medical and recreational cannabis laws continue to evolve, employers in the Northeast face unique challenges when developing workplace policies. Understanding state-specific regulations is crucial to ensuring compliance while maintaining a safe and productive work environment. This guide provides an overview of cannabis-related employment laws in key Northeastern states, offering clarity on what employers can and cannot do regarding hiring, discipline, and drug testing. Since state laws change frequently, employers should consult legal professionals and insurance carriers for the most up-to-date guidance. Key Considerations for Employers Employers must balance workplace safety with employees’ rights, particularly as state laws differ significantly. While federal regulations such as the Drug-Free Workplace Act and Department of Transportation (DOT) rules still apply, employers should also consider: State disability discrimination laws – Some states require reasonable accommodations for medical cannabis use. Lawful off-duty conduct laws – In certain states, employees cannot be disciplined for legally using cannabis outside of work. Religious accommodations – Employers may need to accommodate cannabis use for religious purposes. Wrongful termination claims – Firing an employee solely for cannabis use may violate public policy in some jurisdictions. State drug testing laws – Some states impose restrictions on when and how employers can test for cannabis. Employers may maintain drug-free workplace policies but should ensure they comply with state-specific requirements, particularly when disciplining employees or making hiring decisions. State-Specific Employer Guidance Below is a breakdown of cannabis-related employment laws in key Northeastern states. Connecticut With some exceptions, employers: Cannot refuse to hire an applicant for using cannabis outside of work unless they would violate a federal contract or lose federal funding by hiring them. Cannot discipline or discharge employees for using cannabis outside of work unless they have a written policy that is provided to employees prior to its effective date, and to applicants when they are offered a job. Cannot discipline or discharge employees or applicants for testing positive for the main inactive metabolite of cannabis. Can prohibit employees from working under the influence of cannabis. Can discipline and discharge employees if they have a reasonable suspicion that they used cannabis at or during work or on call. Can discipline and discharge employees who show specific, articulable symptoms of impairment while working or on call that negatively affect their job performance. Employers may not discriminate against or discipline an applicant or employee based solely on their status as a medical cannabis patient, except when: It would violate a federal law; or The employer would lose federal funding. Note: A court has held that a federal contractor’s required compliance with the Drug-Free Workplace Act did not qualify for either exception. A court has held that a registered patient’s protected status includes using medical cannabis off duty. Employers cannot prohibit employees who are qualifying palliative medical cannabis patients from possessing cannabis at work. The medical cannabis law states that employers may prohibit employees from using cannabis during work and from working under the influence of cannabis. Delaware Employers may not discriminate against or discipline an applicant or employee based solely on their status as a medical cannabis patient. Employers may not discipline or discharge applicants or employees based on a positive drug test unless they use, have, or are impaired by cannabis at work or during work. The recreational cannabis law states that it doesn’t restrict employer rights with respect to setting and enforcing terms and conditions of employment (for example, accommodations, policies, or discipline) and that employers can prohibit the possession, use, and distribution of cannabis on their property. Exceptions to employment protections under the medical cannabis law exist when the employer would: Lose federal money; or Lose a federal license. District of Columbia Employers may have drug policies prohibiting cannabis. The recreational cannabis law states that employers are not required to accommodate cannabis use at work. Protections have passed for medical cannabis use, but the effective date is still pending. Employers may not test applicants for cannabis until after extending a conditional offer of employment, unless otherwise required by law. Maine Employers may prohibit employees from using recreational marijuana at or during work. Employers may discipline employees for working under the influence of recreational marijuana. The law previously specifically prohibited employers from disciplining employees for off-duty use, which the Maine Department of Labor interpreted to mean that employers cannot discipline an employee or disqualify an applicant based solely on a positive marijuana test. Employers may not discriminate against or discipline an applicant or employee based solely on their status as a medical cannabis patient, except when the employer: Would lose federal money; or Would lose a federal license. The medical cannabis law states that it does not require employers to allow employees to use cannabis at work or to work while under the influence of cannabis. Maryland The medical cannabis law does not address employers’ or employees’ rights or obligations specifically. However, the law states that medical cannabis patients cannot be penalized, disciplined, or denied any right or privilege for using or possessing medical cannabis in compliance with the law. The recreational cannabis law does not address employers’ or employees’ rights or obligations. Massachusetts The recreational cannabis law states that it does not prevent employers from enforcing their drug policies restricting employees’ consumption of cannabis. The cannabis laws state that employers are not required to accommodate medical or recreational use at work. Employers are required to engage in the interactive process under state disability discrimination law regarding potential accommodations for off-duty medical use. New Hampshire The medical cannabis law states that it allows employers to prohibit employees from using cannabis at work or during work, and from working under the influence of cannabis. Using medical cannabis off duty can be a reasonable accommodation under the state’s disability discrimination law. New Jersey Employers are prohibited from: Requesting criminal cannabis history; Making employment decisions based solely on an applicant’s or employee’s criminal cannabis history; Discriminating against an employee or applicant because they use cannabis outside of work; or Disciplining an employee solely for testing positive for THC. Drug testing for cannabis/THC must include a physical evaluation to determine if the employee is currently impaired. The physical evaluation must be done by someone with a Workplace Requirement Recognition Expert (WIRE) certification. Employers may not discriminate against an applicant or employee based solely on their status as a medical cannabis cardholder. If an applicant or employee tests positive for THC, the employer must provide them with written notice of their right to present a legitimate medical explanation for the positive test result or request a retest of the original sample at the applicant’s or employee’s own expense. The applicant or employee then has three working days to provide their healthcare practitioner’s authorization for medical cannabis or a registry identification card. Exceptions to these employment protections for medical cannabis are: If the employee uses or has cannabis during work; If the employer would violate federal law; or If the employer would lose a federal license, a federal contract, or federal funding. The medical cannabis law states that it allows employers to prohibit employees from using cannabis at or during work. Employees can sue employers under the state disability discrimination law for failing to accommodate off-duty medical cannabis use. New York Employers may not discriminate against or discipline an applicant or employee based on their lawful off-duty consumption or use of cannabis off the employer’s premises. Exceptions to these employment protections exist where: The employer’s action is required by federal or state law or federal or state governmental mandate; The employee is impaired by cannabis during work (see below); or The employer would violate a federal law or lose federal funding or a federal contract. An employee is impaired by cannabis at work if they have “specific articulable symptoms” that either negatively affect their job performance or interfere with the employer’s ability to provide a safe workplace. The medical cannabis law states that it allows employers to prohibit on-duty impairment. State disability discrimination protections apply to certified medical cannabis patients. Exceptions to the medical cannabis employment protections exist when the employer would: Violate federal law; Lose a federal contract; or Lose federal funding. Pennsylvania The medical cannabis law prohibits employers from discharging, threatening, refusing to hire, or otherwise discriminating or retaliating against an employee solely based on their status as a medical cannabis patient. The medical cannabis law states that it does not: Require employers to allow employees to use medical cannabis at work. Prohibit employers from disciplining an employee for being under the influence of medical cannabis at or during work when the employee’s conduct falls below the standard of care normally accepted for that position. Require employers to violate federal law. The medical cannabis law states that it allows employers to prohibit employees from performing any duty that could result in a public health or safety risk while under the influence of cannabis. Rhode Island Employers may not discriminate against or discipline an applicant or employee based solely on their status as a medical cannabis cardholder, with the following exceptions: The employee uses or has cannabis at work; The employee is under the influence of cannabis at work; The employee works under the influence of cannabis when doing so would be considered negligence or professional malpractice, or would jeopardize workplace safety; The employee operates or physically controls a motor vehicle, equipment, or firearms while under the influence of cannabis; The employee violates terms of a collective bargaining agreement; The employer would lose federal funding; or The employer would lose a federal licensing-related benefit. The medical cannabis law states that it does not require employers to accommodate employees using medical cannabis at work. Employers are prohibited from disciplining or discharging an employee for lawfully using cannabis off duty unless one of the following exceptions applies: The employee works while under the influence of cannabis; The employee is subject to a collective bargaining agreement that prohibits lawful, off-duty cannabis use; The employer is a federal contractor and failing to discipline or fire the employee would cause the employer to lose a monetary or licensing-related benefit; The employer is subject to a federal law or regulation, and failing to discipline or fire the employee would cause the employer to lose a monetary or licensing-related benefit; or The employee’s job is hazardous, dangerous, or essential to public welfare or safety and the employer’s policy prohibits them from using cannabis for 24 hours before their scheduled shift (e.g., first responders, jobs that involve operating heavy equipment or machinery or commercial vehicles). Vermont The recreational cannabis law states that it does not: Require an employer to allow employees to use or have cannabis at work; Prevent an employer from having a policy that prohibits the use of cannabis at work; Create a reason an employee can sue an employer; or Prevent an employer from prohibiting or regulating cannabis at work. The medical cannabis law does not address employers’ rights or obligations. Navigating cannabis laws can be complex, but staying informed about your state's regulations is crucial. Employers in the should continually review their policies and seek legal counsel to ensure compliance, reduce liability, and maintain a safe work environment for all employees. If you have any questions, contact us ! Simco is here to support your business.
Have a question? Get in touch.
Our Services.
From the Blog.
Cybercriminals continue to evolve their tactics, making phishing attacks more sophisticated and harder to detect. Every day, countless phishing emails reach inboxes, often with the intent to steal sensitive information or spread malware. Unfortunately, many of these attacks succeed in just a matter of seconds— the median time for users to fall for phishing emails is less than 60 seconds according to the 2024 Verizon Data Breach Investigations Report . With stolen credentials being one of the most popular methods of attack, businesses face increasing risks as these types of cyber threats become more complex and dangerous. How Phishing and Spoofed Domains Work Phishing attacks aim to trick employees into revealing sensitive information, often through: Fraudulent Email Links – These emails appear to be from trusted sources but contain malicious links that install malware or steal login credentials. Look-Alike Domains – Hackers create fake websites that resemble real business portals, altering a single character in the domain (e.g., “micr0soft.com” instead of “microsoft.com”). Credential Theft – Once hackers obtain login credentials, they sell them on the dark web, leading to widespread data breaches. Red Flags: How to Identify a Phishing Email Unusual Sender Addresses – Cybercriminals often spoof email addresses to look like trusted sources. Carefully inspect the sender's domain name for typos, extra characters, or strange formatting. A genuine email from "paypal.com" could be faked as "paypall.com" or "paypal-support.com." Urgent or Threatening Language – Many phishing emails attempt to create a sense of urgency, claiming that an account will be suspended, a payment has failed, or legal action is imminent. If an email pressures you into immediate action, be suspicious. Unexpected Attachments or Links – Hover over hyperlinks before clicking to see the actual URL destination. If the web address looks unfamiliar or mismatched with the sender's identity, do not click. Similarly, attachments that appear out of context—especially ZIP files, PDFs, or Word documents—could contain malware. Requests for Sensitive Information – Legitimate organizations will never ask for passwords, Social Security numbers, or banking details via email. If an email requests confidential information, verify with the company directly using a trusted phone number. Generic Greetings or Poor Grammar – Emails that start with “Dear Customer” instead of your name, or those containing awkward phrasing and misspellings, often indicate phishing attempts. Many cybercriminals operate internationally and use machine translations, leading to unnatural wording. Best Practices to Protect Your Business Train Employees Regularly – Frequent security awareness training helps employees recognize phishing attempts. Past studies by Proofpoint show that companies with ongoing cybersecurity training reduce phishing-related breaches by up to 60%. Implement simulated phishing tests to reinforce learning. Enable Multi-Factor Authentication (MFA) – MFA significantly decreases the chances of an account being compromised, even if login credentials are stolen. Microsoft reports that MFA can block over 99% of automated cyberattacks . Ensure all employees activate MFA for business accounts. Verify Requests Independently – If an email asks for sensitive actions (e.g., wire transfers, login changes, or software downloads), confirm the request through a known and trusted contact method. Never use the phone number or link provided in the email —instead, visit the company's official website or call using a verified number. Monitor and Filter Emails – Implement robust email security tools that automatically flag suspicious messages. Advanced filtering systems, like those offered by Barracuda Networks, can block over 90% of phishing emails before they reach inboxes. Encourage a Report-First Culture – Employees should feel empowered to report suspicious emails even if they are unsure. IT teams can analyze these reports to strengthen cybersecurity measures. Early detection prevents widespread damage. Use a Password Manager – Employees often reuse passwords across multiple accounts, increasing security risks. Encourage the use of password managers like 1Password or LastPass to generate and store complex passwords securely. New Tactic: The Rise of QR Code Phishing ("Quishing") QR code phishing, or "quishing," is a new phishing tactic gaining momentum as attackers exploit the widespread use of QR codes. Unlike traditional phishing, which relies on malicious email links, quishing uses QR codes to redirect users to fake websites designed to steal login credentials. Several factors contribute to quishing's success: Ubiquity : QR codes are now commonly used for payments, tickets, and documents, reducing suspicion when they appear in emails. Minimal Text : Unlike traditional phishing emails, quishing messages often contain little text, making them harder for security systems to flag. Mobile Vulnerability : QR codes are scanned on personal devices, which typically lack the protection of corporate systems. According to Abnormal Security , 90% of quishing attacks involve credential phishing , where users are tricked into entering sensitive data. Another common tactic is using fraudulent MFA alerts, which account for 27% of attacks , while 21% involve fake document-signing requests . Final Thoughts At the end of the day, protecting your company from phishing and cyber threats requires more than just technology—it’s about the people behind it. By fostering a culture of awareness and encouraging open communication, you empower your employees to be the first line of defense. Together, with vigilance and the right tools in place, you can ensure the safety of your sensitive data and build a more secure future for your business.
Employee Appreciation Day, which falls on March 7th this year, is an ideal occasion to express gratitude for the hard work and dedication of your employees. At Simco, we recognize that employee appreciation shouldn’t be limited to just one day, but this day presents a special opportunity to go above and beyond in showing your team how much they mean to the success of your organization. When employees feel recognized and valued, it enhances morale, engagement, and ultimately, productivity. Here are several thoughtful and impactful ways to celebrate Employee Appreciation Day, creating lasting positive effects for both your employees and your company. 1. Personalized Appreciation Nothing shows employees you truly value them more than personalized recognition. Tailor your appreciation efforts to each individual, acknowledging their unique contributions and the impact they’ve made. Personalized gestures help employees feel recognized for the specific work they’ve done, making the appreciation feel authentic and meaningful. You can: Write Personalized Thank-You Notes : Take the time to write handwritten notes to your employees, thanking them for their specific achievements and how they contribute to the company’s overall success. Publicly Acknowledge Contributions : During a company meeting or via a group email, recognize each team member's individual contributions, celebrating their efforts with concrete examples. Employee Spotlights : Feature standout employees in your internal newsletter or on social media to highlight their unique strengths and hard work. 2. Host an Engaging Celebration Employee Appreciation Day is an excellent time to host a celebration that brings everyone together, whether virtually or in person. A well-planned event can boost morale and provide a chance for employees to connect with one another outside of their usual work routines. Ideas for celebration include: Catered Meals or Special Treats : Provide lunch, snacks, or a special treat to make the day feel celebratory. A fun lunch or dessert bar can offer an opportunity for employees to mingle and bond. Themed Events : Host a fun, themed event such as a retro office party or a “thank you” happy hour where employees can unwind and enjoy themselves. Virtual Celebration : For remote or hybrid teams, set up a virtual event like a game or trivia session where employees can engage and laugh together. 3. Offer Tangible Tokens of Appreciation While a simple thank-you is powerful, offering a meaningful gift can take employee appreciation to the next level. Thoughtful rewards can show your team that you not only recognize their hard work but are also willing to invest in their well-being. Consider: Gift Cards : Offer gift cards to popular retailers, restaurants, or online stores, allowing employees to pick out something they personally enjoy. Wellness Incentives : Gifts that promote health and wellness—such as fitness trackers, yoga classes, or access to mental health resources—show employees you care about their overall well-being. Company Merchandise : High-quality, branded merchandise like apparel, accessories, or tech gadgets can serve as a lasting reminder of your appreciation. 4. Invest in Professional Development One of the most meaningful ways to honor your employees is by helping them grow professionally. Employee Appreciation Day is a great time to invest in their future, whether through formal training, new opportunities, or fostering leadership skills. Ways to offer growth opportunities include: Learning Stipends : Offer financial support for employees to pursue further education, certifications, or online courses that align with their career goals. Internal Development Programs : Launch mentorship initiatives or leadership programs that enable employees to expand their skill sets within the organization. Growth Opportunities : Encourage employees to explore new roles or responsibilities that align with their career aspirations, reinforcing your commitment to their long-term success. 5. Encourage Peer Recognition Employee appreciation doesn’t have to be a one-way street from management to employees. Encouraging peer-to-peer recognition helps build a strong team culture, where employees feel supported and valued by their colleagues as well. This helps foster camaraderie and teamwork, which benefits the entire organization. Ideas for peer recognition: Peer-to-Peer Appreciation Platforms : Create an internal platform where employees can nominate or thank their colleagues for their contributions, highlighting specific ways they've gone above and beyond. Recognition Wall : Set up a virtual or physical wall where employees can post messages of appreciation for their peers, encouraging a culture of gratitude. Monthly Recognition : Implement a peer-nominated “Employee of the Month” program to recognize and reward employees for their ongoing contributions. 6. Give Back Employee Appreciation Day also provides an opportunity to show gratitude by giving back to the community. Many employees value working for companies that have a strong sense of corporate social responsibility. By organizing a charitable event or initiative, you demonstrate that your organization cares about making a positive difference beyond the workplace. Ideas for giving back include: Company Volunteer Days : Organize a day of service where employees can volunteer at a local charity or nonprofit, allowing them to contribute to causes they care about while bonding with their colleagues. Matching Donations : Offer to match employee donations to their favorite charities, demonstrating that you support their personal values and causes. Charitable Fundraising Events : Host fundraising activities or auctions with proceeds going to a charitable organization chosen by the team. 7. Seek Feedback Finally, a key part of showing appreciation is listening to your employees and gathering feedback on how they feel valued. Employee Appreciation Day offers the perfect occasion to ask for input on what makes them feel appreciated and what could be improved. This helps ensure that future efforts are even more meaningful. Ways to gather feedback: Anonymous Surveys : Send out a survey asking employees what makes them feel most appreciated and if they have any suggestions for improving recognition practices. One-on-One Check-ins : Arrange individual meetings with employees to hear their thoughts on workplace culture and recognition, providing an opportunity for honest feedback. Cultivating a Culture of Appreciation Year-Round Employee Appreciation Day is a special occasion, but the benefits of recognizing your team should last well beyond this single day. When employees feel consistently valued and appreciated, it leads to higher morale, greater job satisfaction, and increased engagement. By investing in recognition efforts, offering meaningful rewards, and fostering a culture of appreciation, you ensure that your team remains motivated, happy, and productive all year long. At Simco, we believe that lifting and supporting employees is integral to creating a thriving workplace. Whether you celebrate Employee Appreciation Day with gifts, events, or personalized recognition, taking the time to show gratitude is a small gesture that can have a lasting impact on both your employees and your business.
Our Company.
Sign up for our Newsletter.
Designed and Developed by Vessel Digital Marketing