Nobody Is Coming to Refund You

You send the invoice you have sent forty times before. Two weeks later the client says they paid it. They did. Just not to you.

Almost every small business owner believes that if money is stolen from the business, the bank will give it back. That is broadly true of you as a private individual. It is largely not true of you as a business, and finding that out on the day it happens is one of the more expensive afternoons a person can have.

Consumer accounts in the United States are protected by a federal regulation that sharply limits what you can lose. Business accounts are generally not covered by it. They run on your deposit agreement and on commercial law that can leave the loss sitting with you, even though you never authorised the payment. As a business you also get roughly one business day to return an unauthorised debit, where a consumer gets sixty.

This book is what to do about that, written for the one-person operation: the freelancer, the Etsy shop, the store run off a kitchen table, the side hustle that quietly became most of the income. No IT person, no security budget, no time.

What is inside

• The rule that changes everything: why business money is not protected the way personal money is, and the four questions to ask your bank this week
• The email that costs the most: how invoices get rerouted, including the version where the client's real account is the one sending it, and the one rule that stops both
• The bank setup that stops most of it: Positive Pay, ACH filtering and debit blocks, in an hour, mostly working even when a password is already gone
• The fake client: overpayments, deposits that reverse, and the policy that ends the entire category
• The official-looking letter: filing fees, poster compliance and payroll phishing designed to be mistaken for government mail
• When the files are locked: backups that survive the same event, and the test almost nobody runs
• What you are holding on other people: breach notification duties you probably did not know you had, and how to hold less
• Platforms, websites, domains and social accounts: the assets you depend on but do not fully own, and how each one is actually lost
• The insurance trap: why cyber liability often does not cover money you were tricked into sending, and the exact question to ask your broker
• A one-page incident plan and a five-day setup checklist

The details

• 18 chapters, around 12,000 words, 73 pages
• A checklist at the end of every chapter, plus the whole book as a task list
• PDF and EPUB, both included: the EPUB reflows to your font size and works with read-aloud, so it can be listened to rather than read
• Written for the United States, since the legal protections described are US rules
• Instant download. No account needed to buy. Nothing ships

Nothing in it is expensive or technical. It is a phone call to a bank, a rule about verifying payment changes, a backup drive you unplug, and a habit of looking at the account every morning. Together they take about an hour, and they prevent most of what actually happens to businesses your size.