FRAUD AND CYBER THREAT LANDSCAPE

Bank Impersonation
Scams

Scammers pose as a legitimate bank via calls, texts, emails, or apps to pressure victims into revealing credentials or moving money. They rely on urgency and fear, such as fake fraud alerts, to trick people into acting quickly without verification.

· Urgent or threatening messages demanding immediate action, requests for username, passwords, RSA token codes, PINs, or full account details.

· Requests to move money to a “safe” account or buy gift cards/crypto.

· Unexpected links, attachments, or caller ID/email domains that look slightly off.

· Being told not to contact the bank directly or to keep the interaction secret.

Business Email Compromise (BEC)

Criminals impersonate executives, vendors, or partners to redirect payments or request urgent fund transfers. Uses email spoofing or hacked accounts. Often involves fraudulent invoice changes or fake wire instructions.

Unexpected requests to change payment details, urgent financial instructions sent via email, or subtle email address variations.

AI‑Enhanced
Impersonation and Deepfake Scams

Fraudsters use AI-generated voice or video to impersonate leaders, financial institutions, vendors, or technical support personnel.

Unusual voice calls requesting urgent transfers, video calls with poor synchronization, or instructions outside normal procedures.

ACH Fraud and
Payment Redirection

ACH fraud is rising, including unauthorized payment redirection and false-pretense credits. The National Automated Clearing House Association implemented 2026 rule changes to combat these schemes.

Requests to update vendor banking information, payroll deposit changes, or irregular ACH disbursements.

Account
Takeover (ATO)

Attackers gain access to business banking through phishing, credential theft, or malware for the purposes of initiating unauthorized transactions, financial theft or identity theft.

Unexpected login alerts, unexpected password resets,  one-time password/MFA notifications, or unauthorized device sign‑ins.

Check Fraud

Fraudsters are using AI to create realistic counterfeit checks and exploit remote deposit tools.

Altered checks, duplicate check numbers, or unfamiliar remote deposits.

Money Mule Schemes

Businesses or employees may be recruited, knowingly or unknowingly, to move illicit funds, often through job or work‑from‑home scams.

Requests to deposit or transfer funds for unfamiliar parties or offers of payment for simply “moving money.”

Agentic Bot and Automated Social Engineering Attacks

AI‑powered bots can impersonate contacts, conduct conversations, and manipulate employees into releasing funds or sensitive information.

Emails or messages that feel unusually polished, automated, or persistent.

Authorized Push Payment (APP) Scams

Employees are manipulated into voluntarily sending money to fraudsters, often through social engineering or vendor impersonation.

Requests for rushed payments (especially cryptocurrency), which may involve new or updated instructions, and too good to be true opportunities.

Phantom Hacker Scams

Fraudsters pose as banks, cybersecurity teams, or federal agencies telling individuals and businesses their accounts are “at risk,” then instruct them to move money to a “safe” account.

Anyone claiming you must urgently transfer funds for security reasons.

Email‑Focused Financial Fraud

Highly convincing email scams that avoid suspicious links and rely on conversational manipulation or direct you to call a number provided (callback phishing) for assistance. Common versions include:

· Fake fraud alerts.
· Fake invoices or charges.
· Unexpected or “urgent request” emails.
· Account freeze warnings.

· Any financial request made exclusively through email, verify using another trusted contact method before acting.
· Never call a number provided in an unexpected email.
· Look up the official telephone number online.

Financial Relief and Assistance Scams

Scammers mimic relief programs, grants, and government assistance to harvest banking details.

Urgent messages claiming eligibility for relief funds or requesting sensitive financial data.