The North West Cyber Resilience Centre (NWCRC) is urging businesses to review their cyber security foundations after it was announced that Manchester will be the host
city for the G20 summit in November 2027.
The summit will bring the region’s businesses into contact with new suppliers, contractors and customers. This means that cyber fraudsters are likely to target hotels, transport
providers and event venues with invoice and payment fraud or even larger cyber attacks.
The NWCRC is warning businesses to put checks in place now, rather than wait until next year. Fraudsters will be relying on businesses dealing with unfamiliar suppliers and customers and will seize any opportunity to take advantage.
READ MORE: Former JustGiving digital product lead joins community-focused Manchester tech firm
The Government Cyber Security Breaches Survey 2025/6 found that almost half (43%) of UK businesses identified a cyber breach or attack in the previous 12 months, while 38%
identified a phishing attack.
Chief Inspector Dan Giannasi, who heads up the NWCRC team, said: “Hosting the G20 is a fantastic opportunity for the region’s business sector. However, businesses need to be
on high alert around potential cyber attacks and fraud.
“Fraudsters often target businesses, such as hotels and suppliers, around large events. This often takes the form of invoice fraud, or impersonation in order to gain financial details, as well as phishing attempts through fake emails or text messages, for example.”
CI Giannasi has highlighted the three main cyber risks for the hospitality and events industry to be aware of over the next year:
- Impersonation: Fake emails or online messages may claim to relate to existing bookings and express urgent changes to plans. Staff should always exercise caution and double check all changes to plans or unexpected requests.
- Fake invoices and changed bank details: A fraudulent invoice may look like it comes from a real supplier or contact. Businesses should verify contact details and new payment details independently before transferring money.
- Phishing and malware: A phishing email, text message or social media message could lead to a link that is actually malware, which can take over the email account, or even the whole IT system.
Businesses should keep devices and software updated, protect important accounts with multi-factor authentication and make it easy for staff to report suspicious messages.
CI Giannasi added, “We also strongly advise all businesses across the region to start work on their cyber defences now, and consider working towards their Cyber Essentials
certifications, which demonstrates to your supply chain that you take cyber security seriously.
“The NWCRC is part of a Home Office funded network across England and Wales offering free Crime Prevention Meetings and guidance for small businesses to build their defences against growing cyber attacks. Businesses are strongly urged to use the free training and assets to ensure their employees understand cyber risks and the impact of one single click on a phishing message.”
