Money & Finance › Fraud, scams & enforcement › Payment fraud: check, wire, card and app scams
Business email compromise: fake wire instructions
· Fraud or scheme
Fact, law or dataA rule, statute, definition or measured number.
Criminals hijack or imitate a business email thread and send 'updated' payment instructions, so the victim wires money to the thief.
See it on the Money & Finance map →How it works
Thieves phish a password or register a look-alike domain, then watch threads with vendors, title companies, lawyers or the CEO. When a payment is due, they send 'new' bank details or an urgent request. The victim wires to a mule account, and within hours the money moves abroad or into crypto. Wires are final, and a bank may pay by account number alone (UCC Article 4A). A fast report to the bank and the FBI's IC3 can let its Recovery Asset Team freeze funds.
Why it matters
It is among the costliest US frauds: about $3 billion in reported losses in 2025, mostly by wire (FBI). Since 2026, Nacha rules require ACH fraud monitoring for 'false pretenses' payments like these.
Think of it like
Like a forged letter on your property manager's letterhead telling every tenant to send rent to a 'new' bank account.
Facts, rules and data
FBI IC3 reports ($2.77 billion lost in 2024, about $3.05 billion in 2025) and DOJ cases, such as Evaldas Rimasauskas, who posed as a Taiwanese supplier, took Google and Facebook for over $100 million and got five years in 2019.
Debates and risks
Reported losses understate the total, since many firms never report. Whether the sender, its bank or the receiving bank bears the loss is often fought in court.
Connections (3)
▸Wire transfers: same-day, final and hard to reverse are the main target of Business email compromise: fake wire instructionsFact, law or data
The connection
Thieves want payments that are large, fast and final. A wire can move hundreds of thousands of dollars the same day, banks pay by account number alone, and a recall relies on the receiving bank's goodwill. So BEC scammers send fake wiring instructions and move the money onward within hours.
When and why
Worldwide, with US real-estate closings, vendor payments and payroll favorite targets; victims report to the FBI's IC3.
How we know
FBI IC3 annual reports: about $2.8 billion in reported BEC losses in 2024, mostly by wire.
Debates and risks
Who bears the loss, the sender, its bank, or a receiving bank that ignored a name mismatch, is often fought in court.
▸Business email compromise: fake wire instructions is among the costliest forms of Payment fraud: check, wire, card and app scamsFact, law or data
The connection
BEC rarely needs hacking skill, just a spoofed email and a believable invoice. Yet each theft is large because business payments are large. The FBI counted about $2.8 billion in reported BEC losses in 2024, second only to investment fraud among the cybercrimes it tracks.
When and why
US and worldwide; the FBI's IC3 received over 21,000 BEC complaints in 2024.
How we know
FBI IC3 annual reports and Justice Department prosecutions of BEC rings.
Debates and risks
Reported losses likely understate the total, since many companies settle quietly or never report.
▸Escrow: a neutral holder releases money when terms are met is a prime target of Business email compromise: fake wire instructionsFact, law or data
The connection
Closings are predictable: a known date, a large wire and many emails. Criminals hack or imitate an escrow officer, broker or lawyer and send 'updated' wiring instructions. The buyer wires the money to a mule account, and it moves on within hours. Calling escrow at a known phone number before wiring is the main defense.
When and why
Nationwide, in residential and commercial closings; the FBI's IC3 logged about $2.8 billion of business-email-compromise losses in 2024.
How we know
FBI IC3 annual reports, title-industry fraud alerts, and lawsuits over who bears the loss.
Debates and risks
How much closing-wire fraud goes unreported, and how much can be recovered when the victim alerts its bank and the FBI within hours.