Before anyone sends a wire or ACH payment
- Treat any change as suspect
New bank details, a new account or a rushed deadline in an email is the warning sign. Do not reply to that email.
- Call a number you already have
Phone the sub, supplier, title company or owner using the number in your contract or vendor file, never one from the email.
- Get a second approval
A second person signs off on any new or changed payment instructions before money moves.
- If money went out, call the bank now
Ask your bank to recall the wire, then file at ic3.gov. The FBI's Recovery Asset Team froze $679 million in 2025 and reported a 58% success rate 1.
See what it would cost for your company. Two short steps, free for businesses.
Get a quote for my business- IT services for construction companies
- IT services for construction companies are outside support for the office, the trailer and the field: laptops, tablets and phones used on job sites, internet at temporary locations, project management and estimating software, email and file storage, and the security controls that protect payments and bids.
What IT services for construction companies cover
IT services for construction companies cover three places at once: the main office, temporary job-site trailers, and devices in trucks and on crews. Most office-based IT providers are set up for one building with fixed desks, so the first thing to check is whether a provider has supported field operations before.
A typical scope includes:
- Laptops, tablets and rugged phones for superintendents, foremen and project managers.
- Internet and Wi-Fi for site trailers, often cellular or satellite, set up and moved as jobs start and finish.
- Project management, estimating, takeoff and accounting software, including user accounts and integrations.
- Email, file storage and sharing with owners, architects and subcontractors.
- Device management so a lost tablet can be locked and wiped remotely.
- Backups for project files, bids and accounting data.
Real estate brokerages and property management firms share most of this list. They swap job-site trailers for agents working from cars and homes, and add tenant portals, leasing software and owner reporting. All three rely on email for money movement, which is where most of the risk sits.
Field devices and job-site connectivity
Field devices need central management, because nobody in the office will touch them for months at a time. A mobile device management tool lets a provider push apps and updates, require a passcode, keep company data separate from personal apps on employee-owned phones, and wipe a device that is lost or left behind when someone quits.
Job-site internet is the other weak point. A trailer may run on a cellular hotspot, a fixed wireless link or satellite service, and it often moves every few months. Ask a provider how it handles a new site: who orders the service, who configures the firewall, and how long it takes. A standard kit that ships preconfigured, with the same firewall, Wi-Fi and printer setup each time, makes the move routine instead of a one-off project.
Keep shared files in the cloud rather than on a server in the main office. Crews working from a weak connection get files faster from a cloud service than over a VPN back to headquarters, and there is one less piece of hardware to fail.
Want a second opinion on your setup? Send a short request and one provider follows up by email within one business day. How it works.
Get a quote for my businessProject management and estimating software
Project management and estimating software is where a construction firm's work lives, so who owns the accounts matters as much as who fixes the computers. A provider should keep a list of every business application, who the admin is for each, and which ones hold payment or bank information.
Three checks to ask for:
- Single sign-on and MFA. Tie logins for project, accounting and file tools to your Microsoft 365 or Google accounts where the software allows it, and require MFA. Microsoft research found MFA reduced the risk of account compromise by 99.22% 6.
- Admin access held by the company. At least one owner-level account should belong to the company, not to a former project manager or an outside consultant.
- Backups outside the app. Many cloud tools keep data, but restoring a deleted project or a mailbox is easier with a separate backup. Published estimates put Microsoft 365 backup at about $2 to $5 per user per month 107.
Subcontractors and owners also need access. Share project folders through guest links that expire, rather than giving outside companies full accounts in your system.
Wire fraud and payment controls
Wire fraud through fake payment instructions is the most expensive cyber risk most construction and real estate firms face. Business email compromise caused $3,046,598,558 in reported losses across 24,768 complaints to the FBI in 2025 1. The FBI also logged 12,368 real estate fraud complaints with $275,110,419 in losses 1. Its report describes a 2025 case in which a buyer closing on a property received a compromised email from the "title company" with wire instructions for more than $1.3 million 1.
The pattern fits construction well. Draws, progress payments and retainage move in large amounts on a schedule an attacker can learn from a compromised inbox. A fake email from a supplier with new bank details, sent at the end of the month, is the classic version. Insurance data shows the same thing: in Coalition's 2026 claims report, business email compromise and funds transfer fraud made up 58% of incidents 5.
Controls that work are mostly process, backed by a few technical settings:
- Call back on a known number before changing any vendor's bank details.
- Require two people to approve new payees and changed instructions.
- Turn on MFA for every email account and block old sign-in methods that skip it.
- Flag emails from outside the company and alert on new mailbox forwarding rules.
Speed matters if money goes out. The FBI's Recovery Asset Team froze $679,013,183 across 3,900 incidents in 2025, a 58% success rate 1. Call your bank first, then report at ic3.gov. If you have cyber insurance, call the insurer's hotline too. Our incident response guide covers the next steps.
Onboarding and offboarding seasonal crews
Seasonal hiring creates accounts faster than most firms remove them, and old accounts are an easy way in. A provider should run onboarding and offboarding from a checklist tied to your HR or payroll system, so that a person's email, app logins and device access start on their first day and end on their last.
Good practice for crews:
- Give field workers only the apps they need, often just time tracking, safety forms and a company email.
- Use shared tablets with individual logins instead of one shared account.
- Collect devices and disable accounts the day someone leaves, and transfer their files to a manager.
- Review all accounts each quarter for anyone who left without notice.
License costs swing with headcount. Microsoft 365 Business Basic lists at $7 per user per month on an annual commitment and $8.40 on a monthly one 8. Monthly licenses cost more but can be cut when the season ends, so many firms keep office staff on annual plans and crews on monthly.
What it costs and how to choose
Expect a monthly fee for support plus a separate cost for security and backup if they are not bundled. Fully managed IT typically falls between $100 and $250 per user per month in providers' published pricing guides 2. Firms with many field workers who rarely use a computer often get a better price per device. In Kaseya's 2023 survey, the most common per-device band was $50 to $100 per device per month 3. Our managed IT pricing guide shows what drives a quote.
In-house is the alternative. The median wage for a network and computer systems administrator was $99,130 in May 2025 4, or about $141,600 including benefits, based on BLS data 49. Smaller firms rarely need that role full time; larger ones sometimes keep one internal person and add a provider through co-managed IT.
When comparing providers, ask whether they have set up job-site trailers before, how they handle MDM for personal phones, and what they do when an employee reports a suspicious payment email. Bring the questions in our MSP selection guide as well. Cybersecurity for small business covers the baseline controls.
Common questions
How much do IT services for a construction company cost?
Plan on $100 to $250 per user per month for fully managed IT, the range published provider guides give 2. Firms with many field workers often pay per device instead; the most common per-device band in Kaseya's 2023 survey was $50 to $100 per month 3. Security tools and backup may be extra, so ask what is included.
What IT support does a real estate office need?
A real estate office needs managed laptops and phones for agents who work away from the office, email with MFA, secure file sharing for contracts, and strict callback rules for any wire instructions. Real estate fraud complaints to the FBI totaled 12,368 in 2025 with about $275 million in losses 1. Those losses usually start with a compromised email account.
What IT support do property management companies need?
Property management companies need support for leasing and accounting software, tenant and owner portals, staff devices across several buildings, and controls on payments to vendors and owners. Tenant applications hold personal and financial data, so MFA on every account and limited admin access are the starting points. Separate building systems such as door access and cameras from the office network.
How do construction companies prevent wire fraud?
Construction companies prevent wire fraud by calling vendors back on a known number before changing bank details, requiring two approvals for new or changed payees, and turning on MFA for all email. If a fraudulent wire goes out, call your bank at once and report it at ic3.gov.
What cybersecurity do construction companies need?
Construction companies need MFA on email and business apps, managed and encrypted field devices, current updates, tested backups of project and accounting data, and payment approval rules. Many firms buy these through managed security services or as part of a managed IT plan.
Should a construction company hire in-house IT or outsource?
Most small and mid-sized construction firms outsource, because a full-time systems administrator costs about $141,600 a year including benefits, based on BLS data 49. Larger firms often keep one internal IT person and add an outside provider for after-hours support, security and projects. That shared model is called co-managed IT.
Sources
- FBI Internet Crime Complaint Center, 2025 IC3 Annual Report (Internet Crime Report 2025), 2026.
- Flamingo, Cost of IT Support for Small Business, 2026-04-08.
- Kaseya, MSP Pricing: A Guide to Managed IT Services Pricing (2023 Global MSP Benchmark Survey data), 2026-08.
- US Bureau of Labor Statistics, Occupational Outlook Handbook: Network and Computer Systems Administrators, 2026.
- Coalition, 2026 Cyber Claims Report, 2026-03-05.
- Microsoft (Meyer et al.), arXiv, How effective is multifactor authentication at deterring cyberattacks?, 2023-05-01.
- Simply IT, Best Cloud Backup and Disaster Recovery for Small Business (2026), 2026-06-11.
- Microsoft, Microsoft 365 Business Basic, 2026.
- US Bureau of Labor Statistics, Employer Costs for Employee Compensation, June 2026, 2026-09-09.
- Capterra, Veeam Data Cloud for Microsoft 365 Pricing, 2026-09-29.
Updated October 13, 2026.