Cybercrime: Wire transfer fraud

How to stop wire transfer fraud

As the technology used for wire transfers has evolved from telegraphs to smartphones, so have the tactics scammers use to exploit that technology. And those tactics are proving effective, with wire transfer fraud accounting for 39% of business email compromise attempts in 2023.1

Key concepts

In this article, we explore:

  • What wire transfer fraud is
  •  Who it targets
  • Tactics for wire transfer fraud prevention

What is wire transfer fraud?

Wire transfer fraud is a subset of electronic funds transfer (EFT) fraud where scammers manipulate your employees, the banking data in your computer network, or both in order to misdirect funds into their own bank accounts.

Wire transfer fraud typically involves one of two tactics. The first is malware-powered password theft that enables scammers to crack passwords and breach your system to steal or alter banking information. The second is employing a form of social engineering fraud to impersonate an executive team member and then trick or scare lower-level staffers into providing account and routing numbers.

The range of these attacks is expansive—any industry and business using wire transfers can be a target. However, real estate companies, law firms, and financial institutions dealing in capital markets are the most at-risk due to the size and the frequency of their transfers.

Good news: The FBI is returning millions of dollars in stolen funds.
Wire transfer fraud accounted for 39% of business email compromise in 2023. Superscript 1,  53% of U.S. companies were targeted with wire transfer fraud in 2023. Superscript 5

Case study: Industry expertise and AI lend security to home mortgage payoffs. 

In 2022, the real estate industry lost $446 million to wire transfer fraud. To tackle these cybersecurity threats, the team at CertifID developed a novel solution.6 They identified which steps in the mortgage payoff process were most frequently exploited by scammers. They then used AI and machine learning to create an application that precision-automated those vulnerable processes—saving $37 billion7 in wire transactions and identifying $2.4 billion in suspected instances of wire transfer fraud.8

Best practices and prevention

The success of wire transfer fraud hinges on scammers’ ability to manipulate your staff to gain access to the structure of your financial approvals process. Foiling this longstanding scam depends on your ability to educate your team and strengthen your financial protocols. These steps can help you begin that process.

Strengthen your social engineering fraud prevention training.

Train staff to identify the hallmarks of a phishing attack—and implement protocols for reporting business email compromise (BEC) and other social engineering fraud tactics—as a frontline defense against wire transfer fraud.

Tighten your password processes.

If scammers fail to trick teammates, they often turn to password theft. To frustrate these efforts, implement strong password creation protocols, enact regularly scheduled employee password changes, and adopt multifactor authentication software.

Double down on your approval processes.

Dual control is a protocol requiring more than one authorized employee to approve any financial transfer. Pair it with mandatory follow-up communications—to verified emails and phone numbers—to increase your chances of halting fraudulent transfers.

Rethink your network architecture.

Segment off financial systems from other portions of your network and restrict approval privileges to a limited number of people.

Use new tech to fortify your defenses.

Consider implementing AI and machine learning to help your IT team proactively identify attempts at password cracking, alert you to suspicious logins, and quickly spot BEC attempts.

Turn to trusted providers.

Truist provides and maintains secure online banking transfer options, including wire transfers. Our efforts to ensure secure user ID and password protection for every transaction are just part of our commitment to fighting fraud.

FAQs on wire transfer fraud

Component ID : "faq-1301646222"
Model : "faq"
Position : "left"

Electronic funds transfers, or EFTs, happen whenever money is digitally moved between banks. They occur without the intervention of bank employees, don’t require paper documentation, and are the most common form of bank transfer.

No. A wire transfer is a one-time, fast-moving, domestic or international transaction between two financial institutions that requires higher user fees and is capable of moving large sums of money. ACH transfers are similar but can be set up on a recurring basis, are exclusively domestic, typically move slower than wires, have minimal user fees, and are used in a wider range of transfers, such as bank deposits and peer-to-peer apps like Venmo and Cash App.

While recovering money from a completed wire transfer is nearly impossible, the transaction can be reversed—if it’s caught and stopped before your account has been debited.

At the federal level, contact the FBI’s Internet Crime Complaint Center (IC3) and the Federal Trade Commission. You’ll need to provide each with a copy of the initial communication—that is, the email (if you were phished) or voice transcript of a call (if you were vished). Also, contact the financial crime department of your State Identification Bureau, as well as local law enforcement.

Turn to professionals for protection.

For resources on cybersecurity threats and the various types of fraud facing your organization, connect with one of Truist’s relationship managers.

Purple PaperSM

Digital Transformation

Learn how you can put advanced technology to work for your business.

Related resources

    {0}
    {6}
    {7}
    {8}
    {9}
    {12}
    {10}
    {11}

    {3}

    {1}
    {2}
    {7}
    {8}
    {9}
    {10}
    {11}
    {14}
    {12}
    {13}

    Stay informed and get connected

    Looking for fresh thinking and new insights to help uncover opportunities for your business needs?

    Connect with a Relationship Manager

    Work with a partner who sees your vision and has the resources to help you achieve it. We’re ready to focus on the specific needs of your company—and where you are in your business lifecycle.

    *This form is for prospects. Truist clients should contact their relationship manager with inquiries related to commercial products and services.

    Helpful links



    Sign up for monthly articles on Business Insights

    Sign up to receive our business insights, thought leadership, and client success stories that can help inspire your next bold business move.

    Please enter a first name
    Please enter a last name
    Please enter a valid email address
    Please enter a company name
    I'm also interested in: Please select a campaign option