Mastercard opened the European Cyber Resilience Centre (ECRC) in 2024 to strengthen cyber security and cyber resilience. ©Mastercard

Mastercard study: Cyber fraud threatens small and medium-sized enterprises in Germany

• 21% of German founders of small and medium-sized enterprises (SMEs) have already been targeted by fraudsters – 16% fear they will have to close their business in the event of a serious incident
• Almost half already know entrepreneurs who have been affected – yet many feel inadequately prepared: 38% do not know how to protect themselves against fraud
• Mastercard supports SMEs in this area with the European Cyber Resilience Centre (ECRC), innovative tools such as My Cyber Risk and targeted education initiatives

Small and medium-sized enterprises (SMEs) in Germany are under increasing pressure from growing cyber threats, according to a recent Mastercard study of entrepreneurs in 18 European countries. One in five respondents in Germany (21%) has already been targeted by fraudsters, with 7% suffering financial losses. Almost half (46%) know other entrepreneurs who have been victims of a scam.

Europe’s 23 million small and medium-sized enterprises account for 99% of all businesses and provide around three-quarters of all jobs – a market volume that is also very attractive to cybercriminals. As digital scams become increasingly sophisticated, entrepreneurs are required to protect themselves effectively against cyber threats. Particularly worrying is that 38% of German respondents say they do not know how to do this, while 58% emphasise that they need further training in this area.

‘In light of increasing digital fraud and cyber threats, entrepreneurs must take proactive steps to secure their business processes. Our study clearly shows that more education, stronger security measures and closer cooperation within the industry are needed to effectively protect companies. At Mastercard, we know that small businesses are the backbone of the European economy – their resilience is crucial for growth and innovation.’

Michele Centemero, EVP Services Europe at Mastercard

Fear of fraud slows growth

Concern about digital attacks is omnipresent: 18% of German entrepreneurs worry about possible cyber attacks on a daily basis. In addition, 42% say that the risk of fraud prevents them from expanding their business – this reluctance is particularly pronounced in Slovakia (80%), Poland (79%) and Spain (68%). In Europe, one in four respondents (25%) fears that their business would have to close completely in the event of an attack – in Germany, the figure is 16%. These figures underscore the urgent need to provide SMEs in Germany with targeted support in the form of knowledge, tools and partnerships to strengthen their digital resilience.

One year of the European Cyber Resilience Centre (ECRC)* from Mastercard

Since its establishment on 27 May 2024 in Waterloo, Belgium, the ECRC has become a central hub for cybersecurity expertise and cross-sector cooperation in Europe. With over 30 specialised teams, including threat analysts, crisis managers and technical recovery experts, the ECRC helps businesses, institutions and consumers protect themselves against the growing dangers of digital attacks. It stands for a holistic approach to strengthening digital resilience in Europe.

Cybersecurity solutions and practical education for SMEs

To strengthen small and medium-sized businesses in the face of growing digital threats, Mastercard relies on modern security solutions and targeted education initiatives. The goal is to relieve entrepreneurs so they can focus on what they do best: serving their customers.

One example is My Cyber Risk** – a version of the RiskRecon risk scanner specially adapted for SMEs that helps identify and prioritise cyber threats in the digital environment and take targeted action. In addition, ID Theft Protection Monitoring*** provides alerts and support in dealing with identity theft.

Through the Mastercard Trust Centre ****, SMEs also gain access to research findings, resources and practical tools – in collaboration with strong partners and with the aim of working together to ensure greater digital security in Europe.

Mastercard is also driving the scaling of cyber security through new partnerships: Together with CyberMonks and VikingCloud, a marketplace has been created where companies of all sizes can easily find and seamlessly implement tailored cyber security and risk management solutions.

GLOSSARY

* European Cyber Resilience Centre (ECRC)

Since its establishment in May 2024, the European Cyber Resilience Centre (ECRC) has rapidly expanded its role as a hub for cooperation between industry, authorities and research. In addition to providing operational support in acute security incidents, the ECRC establishes regular threat-sharing rounds in which new attack patterns are analysed immediately and shared with over 500 partner organisations across Europe. A dedicated early warning system provides SMEs with timely recommendations for action when suspicious cyber campaigns are identified in their sector. The centre also offers ongoing training programmes ranging from technical deep dives to awareness workshops for employees. Within a year, the ECRC has demonstrated how cross-sector cooperation can strengthen overall cyber resilience in Europe in the long term.

**My Cyber Risk

My Cyber Risk is an intuitive online tool designed specifically for the needs of small and medium-sized enterprises. After a brief self-assessment of their IT setup, entrepreneurs receive a graphical risk assessment of their most important systems and data streams in just a few minutes. The dashboard highlights critical vulnerabilities in colour and provides specific recommendations for action – from simple configuration adjustments to advanced security solutions. The service is supplemented by automated multiple scans that remind the company at regular intervals to identify and address new risks. This transforms cyber security from a complex hurdle into a more transparent, plannable process.

***ID Theft Protection Monitoring

ID Theft Protection Monitoring offers SMEs proactive protection against identity theft and the associated financial damage. The system continuously monitors dark web forums, databases of leaked access data and fraudulent online activities to detect early signs of compromised company or employee information. If the monitoring detects suspicious logins, failed login attempts or unexpected changes in credit and financial profiles, alarm messages are triggered immediately. A dedicated support team then helps those affected to reset hijacked accounts, set up credit alerts and take legal action. ID Theft Protection Monitoring enables companies to respond quickly to identity attacks, minimise reputational damage and maintain business continuity.

**** Mastercard Trust Centre

The Mastercard Trust Centre acts as a central knowledge platform for SMEs and provides practical resources on cyber security and fraud prevention. The user-friendly online interface provides business founders and IT managers with guidelines, best practice examples and checklists on topics such as secure payment processing, data protection and emergency management. Regularly published white papers and case studies illustrate how other companies have successfully countered threats. The offering is complemented by webinars and interactive workshops in which experts provide concrete steps for action and answer practical questions. Through partnerships with industry associations and research institutions, the Trust Centre also ensures that the content provided is always up to date with the latest regulatory requirements and technical developments – from the GDPR to new AI-based attack methods. In this way, the Mastercard Trust Centre supports SMEs in continuously optimising their digital security strategy and systematically building their own resilience.

***** CyberMonks

CyberMonks is an emerging managed security service provider specialising in round-the-clock monitoring of IT infrastructures. Through a SOC-as-a-Service model, CyberMonks provides its customers with real-time security analysts, threat intelligence feeds and automated incident response pipelines. Small businesses benefit in particular from pay-as-you-go rates that allow for scalable adaptation to changing requirements. Training on practical detection methods and response procedures round out the offering, ensuring that companies are not only ‘secured’ but also receive technical and organisational training.

****** VikingCloud

VikingCloud focuses on integrated risk management and compliance automation in the SME environment. Using a central platform, VikingCloud links information on cyber risks, legal requirements and internal guidelines and presents it in clear scorecards. This gives management an overview of open measures, deadlines and responsibilities at all times. API interfaces to common accounting and ERP systems also enable seamless integration into existing business processes. With regular updates on regulatory changes, VikingCloud helps companies keep both their security and compliance roadmaps up to date.

Methodology

The study was commissioned by Mastercard and conducted by the independent research agency Opinium. A quantitative online survey was conducted in 18 European countries between 16 December 2024 and 3 January 2025. The survey questioned 1,830 SME founders aged 18 and above who had started companies with fewer than 250 employees. The full list of countries surveyed: Belgium, Denmark, Germany, France, Greece, Ireland, Italy, Netherlands, Norway, Austria, Poland, Portugal, Sweden, Switzerland, Slovakia, Spain, Czech Republic, United Kingdom.

About Mastercard

Mastercard strengthens economies and supports people in more than 220 countries and territories around the world. Together with our customers, we are working to create a sustainable economy where everyone can thrive. We offer a wide range of digital payment options that make transactions simple, secure, smart and accessible. Our technologies and innovations, partnerships and networks form a unique combination of products and solutions that help consumers, businesses and governments reach their full potential.

More information: www.mastercard.com