Scroll
Protect yourself with DigitalSign
TheNational Cybersecurity Centre (CNCS)recently launched an urgent alert on the growth of CEO Fraud and Business Email Compromise (BEC) in Portugal.
The figures are worrying: in 2025, these campaigns represented 18% of all social engineering incidents notified to CERT.PT, with losses ranging from billions to several million euros per case. The scheme is sophisticated and increasingly difficult to detect. Attackers collect public information about the organization — employees, functions, suppliers and domains — and then access real emails through stolen credentials, or simulate senders through spoofing and typing.
Fake invoices, requests for change of IBAN from suppliers and bank transfers made by employees deceived by the urgency and apparent legitimacy of communications.
Much is said about training and awareness of employees — and CNCS is right to recommend them. But there is a layer of the problem that training alone does not solve: the impossibility of unequivocally verifying whether a document or invoice is genuine and has not been changed after issuing.
When an invoice arrives by email with a different IBAN than usual, how can the employee confirm that that document is true? Without technical validation mechanisms, trust is based only on the appearance of the document — And that's exactly where criminals work.
At DigitalSign, we develop solutions that work precisely in this layer of documentary protection, making any tampering immediately detectable.
DS SigningDesk
The centralized digital signature management platform that allows you to sign contracts, invoices and any document with full legal validity (eIDAS).
With DS SigningDesk, each signed document is protected by encryption: any subsequent change invalidates the signature and is immediately identifiable.
In addition, it maintains a complete audit trail of the entire approval and signature cycle, ensuring full traceability.
DS Invoice & Docs
The electronic invoicing batch subscription solution or other documents that complement your ERP allowing the sending of electronic invoices or other documents in PDF format, complying with the requirements of applicable European and national legislation.
Each invoice issued carries a signature linking the document to the identity of the issuing company. If someone changes the IBAN, the name of the recipient or any other field, this tampering is immediately detected by any validation system.
DS Invoice & Docs is the direct response to CEO Fraud's most common attack vector in a business context.
Qualified Electronic Seal
The highest level of authentication of the origin of a document, issued on behalf of the organisation (not of a natural person).
The Qualified Electronic Seal allows any recipient — customer, partner or supplier — confirm unequivocally that that invoice or communication actually comes from the issuing company without any manipulation.
It is the ideal tool for organizations that issue large volumes of documents and need to guarantee their authenticity automatically and scalable.
CNCS recommends good procedural practices such as two-factor authentication and independent verification of bank data changes. At DigitalSign, we believe that these practices should be complemented by technical solutions that make fraud structurally impossible — not just harder. A document digitally signed with an Electronic Seal Qualified or DS SigningDesk cannot be silently falsified. The tampering is visible. The source is verifiable. Trust ceases to depend only on human attention.
At a time when CNCS warns of the growth of this type of fraud in Portugal, the question that each company must ask is simple: are our documents and invoices protected from tampering?
At DigitalSign, we work daily so that the answer is always yes.
