Key takeaway
A suspicious signal is not proof of fraud. Verify payments and account changes through a known channel, preserve records and promptly notify the bank or responsible team.
Separate suspicion from proof
A fraudster seeks money, data or advantage through deliberate deception. Suspicious activity, unlawful conduct and fraud are different concepts; an unusual transaction is a signal to investigate. Classify from evidence: preserve sender, account and device information, transaction logs and approval records, and do not present unproven intent as fact.
Recognize common schemes and warning signs
Digital risks include fake bank or government messages, business email compromise, false invoices, stolen cards, fake stores, account takeover, ransomware extortion and deceptive investment offers. Urgent payment, a lookalike domain, an unexpected password or one-time-code request, gift-card or crypto transfer, or pressure to bypass approvals are warning signs. Poor grammar or an unfamiliar sender alone does not establish fraud.
Verify money and data requests through a separate channel
Before acting on a request said to come from a bank, supplier or executive, contact them through a known number or internal directory; do not use the number or link in the message. Separate duties and require a second approval for changed bank details, new payees and large transfers. MFA, unique passwords, statement review, supplier-change audits and phishing training reduce the chance of success.
Respond promptly and discreetly when fraud is suspected
If a payment has been made, contact the bank and payment provider immediately through a known channel. Preserve emails, headers, messages, transaction IDs and account changes. From a trusted device, change the affected user’s password and revoke sessions and tokens. Notify security, finance, legal and privacy owners; share staff and customer information only with people who need it for the investigation.