Defense Pack v0.1
You're in.
Print it. Tape it up. Pass it on.
The full pack is below as a print-ready document. Open it, hit Cmd+P (or your phone's share menu → Print), pick "Save as PDF", and you've got a clean handout you can drop on the AP desk this afternoon.
The download
BCL Small-Shop Defense Pack v0.1 — print-ready
~25 pages. Phishing teardown (Part 1) + 60-minute incident-containment plan (Part 2). Cmd+P inside to save as PDF.
What you got
Two defenses, one document.
Part 1 — Phishing teardown
Three real-pattern attacks on small trades shops in 2026: fake-vendor invoice, CEO voice-clone wire request, fake-permit scam. Each case has the email, the three tells, the BCL rule, and a drill you run next week. Closes with the "Three callback rules" wall poster — print and tape near the AP desk.
Part 2 — 60-minute incident containment
For the bad day. Read it cold tonight, fill in the phone numbers tomorrow, hope you never need it. Four scenario-specific runbooks (wire fraud, credential phishing, ransomware, voicemail-wire-request), each with minute-by-minute steps and clear hand-off points to bank, insurer, IT, and the FBI.
Use it well
A small adoption playbook.
- 1.
Read it once cold, today.
Both parts, end to end, while nothing is on fire. You'll catch the Part-1 patterns better with Part 2's scenarios already in your head.
- 2.
Fill in the phone numbers — tomorrow.
The numbers in Part 2 (bank fraud line, cyber insurance, FBI field office) are the actual control. Tape that page inside a desk drawer. Update once a year.
- 3.
Run one drill this week.
Pick one of the three drills in Part 1. Don't punish people who fail — train them. The point is to find the gap, not to hunt humans.
- 4.
Send it to one other shop.
Print a copy for one shop owner you know. The attackers don't stop at our walls. The shops that share defenses are the ones that stay open.
Want the live audit?
We'll send a fake "Joe Mendez" to your real AP person.
For shops that want to pressure-test their defenses with consent: we run a real phishing audit, debrief with your team, and hand you a remediation roadmap. Two minutes to request it — first ten are free.
Tell us where it failed
v0.2 gets better because of your war story.
If a drill went sideways, if a section was wrong for your trade, if a real incident played out differently than this pack predicted — email support@bluecollarlabs.org. We update this pack from the field.