In recent years there has been an increase in the number of social engineering attacks across the nonprofit industry. The attacks range from email phishing to ransomware attacks and can cost organizations significant resources. This is especially relevant now, when many individuals are working remotely and defenses may be lowered due to a focus on COVID-19 pandemic. AACI encourages member centers to periodically assess their vulnerability to social engineering schemes and other cybersecurity threats, review IT policies with personnel, and occasionally provide training to employees to identify and avoid various types of social engineering attacks.