Cybercriminals are exploiting basic human error, including sharing passwords, weak access controls and low awareness, to defraud small businesses as they grow more dependent on digital payments and online platforms, experts said at a roundtable yesterday.