Completion day is payday. Criminals know the date too.
fromIT helps solicitors and law firms protect client money and client files, meet what the SRA and lender panels expect, and respond calmly if a cyber incident happens.
- Cyber Essentials certified
- ISO 27001 practitioner
- Fixed, published prices
fromIT helps you answer every one of these, with evidence.
Four ways criminals target law firms.
Law firms move large sums on known dates and hold sensitive files. Criminals plan around both.
Conveyancing fraud
A criminal watches a mailbox for weeks, then sends "updated" bank details just before completion. One email can cost a client their deposit.
Mailbox takeover
One stolen password gives an attacker your matters, your clients and your tone of voice.
Impersonation
Fake clients, fake firms and emails spoofing your own domain, all aimed at moving money or collecting documents.
Client files exposed
Case files, ID documents, medical and financial records. A leak harms clients and the firm's reputation.
Who asks, what they want, and how fromIT helps.
The SRA doesn't hand you a security checklist. It expects you to manage the risks and protect client money and information. Here is what that looks like in practice.
Your bank details never change by email. Make sure every client knows it.
From first step to fully protected.
Most law firms follow the same four steps. Start wherever makes sense for yours.
- 01
Start free
Free staff training on payment fraud and mailbox scams.
Free → - 02
Get certified
Cyber Essentials at a fixed price, the evidence panels and insurers recognise.
From £595 → - 03
Stay secure
Monthly phishing tests, policies with sign-off and dark web monitoring.
From £2 a month → - 04
If it happens
Calm, fast help, usually starting remotely within the hour.
£795 first response →
Law firm questions
Does the SRA require Cyber Essentials?
The SRA doesn't name a specific certificate. It expects firms to manage risk and protect client money and information. Cyber Essentials is the UK government backed way to show you have the basics in place, and insurers and lender panels recognise it.
How do we stop conveyancing fraud?
Multi-factor authentication on every mailbox, a firm rule that bank details are only confirmed by phone on a number you already hold, clear warnings to clients from the first letter, and staff trained to spot the signs. fromIT can put all four in place.
What if a client's money has already been diverted?
Call your bank and the receiving bank straight away, report it to Report Fraud, then call fromIT on 03333 401 999 to contain the mailbox and find out what happened. You'll also need to consider your SRA and ICO reporting duties, and fromIT helps you work through them.
Can fromIT work with our existing IT provider?
Yes. fromIT focuses purely on security and works alongside whoever looks after your IT today. If you don't have an IT provider, fromIT recommends Adkinsio for everyday IT support.
How much does it cost?
Cyber Essentials starts at £595 as a fixed-price package, plus the IASME assessment fee. Monthly services start from £2 per person. Cyber incident response starts with a fixed £795 first response. Every price is on the site.
Protect your clients' money.
And your firm's name.
Book a 30 minute call. fromIT will look at where your firm stands today and give you a clear, fixed-price plan. No obligation, no sales script.