Invoice Redirection and Business Email Compromise

A payment was redirected to an account controlled by a fraudster.

Recovery outlook

Sometimes recoverable

How this operation works

An email appearing to come from a supplier, colleague, conveyancer, or executive changed the bank details on a payment. Because these losses are usually large, recent, and bank-to-bank, they have one of the better recovery prospects if reported quickly.

Warning signs

Bank details changed at short notice on an expected payment
The request arrived with unusual urgency or secrecy
The sender address differed by a character or the reply-to was altered
The change was never confirmed by phone on a known number

How recovery usually works for this type

Immediate bank recall and beneficiary account freeze
Correspondent bank intervention on international wires
Mule account identification through the receiving bank
Insurance claim under a crime or cyber policy

What the claim form will ask you

Gathering these before you start will make filing quicker.

Who did the email appear to come from? *
The email address used
The genuine email address it imitated
Invoice or payment reference
Did you notify your bank within 24 hours? Speed is the single biggest factor in recovering a redirected payment.

Have you lost money to this operation?

File a claim and we will assess what recovery routes are realistically open to you. We will tell you plainly if we do not think recovery is achievable.

File a claim