Phishing

On set and in production, hundreds of emails land in the inbox daily — shooting schedules, casting documents, contract changes, payment instructions. This is exactly where phishing attacks come in. The attacker steals a familiar email address, fakes the studio's corporate design, links to a fake login page, or attaches an infected PDF. Production managers, line producers, and even actors fall for it — and suddenly criminals have access to the shooting schedule, know budget numbers, or receive transfers to fake accounts.

The scam works because film production operates under pressure. The 1st AD needs the scene sequence by 6 PM, the crew list has to go out — people click faster than they think. Particularly dangerous: phishing emails that pose as the tax office, insurance company, or the in-house payroll department. Real money flows here. A production assistant who receives an email with "update bank details" can disrupt the payment for an entire production.

Practical protective measures on set: Always double-check the sender's address — not just the name, but the complete email domain. An email from "productionstudio.com" looks real, "productionstudi0.com" (with a zero instead of an O) is fraud. Suspicious links? Don't click, but type the URL line yourself or navigate directly to the known page in your browser. For sensitive documents (contracts, payment orders): when in doubt, call — the director, the producer, management — and ask if the email is genuine. It sounds like a lot of effort, but it's faster than repairing the damage afterward.

Some productions also implement simple rules: financial transfers and critical data only through certified channels, never via email link. A password manager and two-factor authentication for production accounts are not a luxury, but a necessity. Trusting IT security, even if it's annoying — that has become part of professional set operations.