The threats
The attacks law practices actually get.
Generic phishing training prepares your team for 2019. The attacks landing on settlement day are AI-written, voice-cloned, and timed to exploit conveyancing pressure. Here's what your team is up against.
Settlement-day wire fraud
Fake "updated banking details" email arrives the morning of settlement. Looks like the vendor's solicitor. Your conveyancer has 90 minutes to act and the seller is on hold.
Trust-account release fraud
A "principal" calls the paralegal asking for an urgent trust-fund release. Voice cloned from a short courtroom video. Cheap compute, a six-figure transfer.
Court-document phishing
"Updated affidavit attached, please review before today's hearing." Document is a payload. Lands in inboxes during the busiest hour of the legal week.
Client portal impersonation
Spoofed emails directing your team to a fake "secure file exchange", your client-management portal's login page, pixel-for-pixel cloned. One click leaks years of privileged correspondence.
Why now
Annual training doesn't work. Settlement-day attacks don't wait.
Most law practices run security awareness once a year, a generic video and a tick-box quiz. That was fine before AI. Today's attackers personalise every message, clone a partner's voice from a courtroom recording, and time their attacks for the exact window when your team is least likely to verify. The gap between what your training covers and what arrives in your conveyancer's inbox has never been wider.
is still a common way a breach begins
can be cloned from a short public clip
is exactly when these attacks are timed to land
How Vigil works for law practices
Simulate. Score. Train. Report. On autopilot.
Vigil runs in the background. The principal logs in once a month for the dashboard view. Everything else is automatic.
SIMULATE
Simulate
Pick from six core attack types, settlement-day wire scams, voice-call deepfake simulations, fake court-document delivery, conveyancing-themed phishing. AI writes every message in the context of your firm and current matters, and any cloned voice or likeness is only ever made from a person who has given consent.
SCORE
Score
Every employee, partners, conveyancers, paralegals, admin, gets a live human risk score. See who's vulnerable, which team needs work, and how risk trends through busy periods.
TRAIN
Train
When someone clicks, training is assigned automatically. Built for the exact scam type they fell for. Quizzes and completion records auto-tracked for compliance.
REPORT
Report
One-click PDF mapped to the Law Society client-confidentiality rules, Essential Eight, ISO 27001, and the Australian Privacy Act. A document you can share with your cyber insurer at renewal.
Compliance
Answer your insurer questionnaire and your Law Society review from the same report.
Most Australian law practices now hold cyber insurance. Renewal questionnaires ask about regular security awareness training, attack simulations, and remediation. Vigil's report documents it: Law Society client-confidentiality obligations, the human side of your Essential Eight programme, and the Privacy Act's APP 11 staff-training requirement. Regenerate any time, always current.
Built for Australian professional-services firms.
Also for
Other professional services teams using Vigil
See the full list on security awareness training by industry.
Train your team before the criminals do.
14-day free trial. No credit card. Law Society-ready report on day 1.
Start 14-day free trialor email us at hello@vigilsecurity.io