# supplier payment fraud prevention: red flags to watch

The most expensive email in China sourcing is the one that changes the supplier's bank account. This guide to supplier payment fraud prevention covers the red flags, the verification routines that stop fraud, and how supplier payment fraud prevention fits into your normal payment process.

What are the key takeaways?

  • Supplier payment fraud usually starts with a fake message changing the supplier's bank details, not with a hacked bank.
  • The classic red flags are last-minute account changes, pressure to pay quickly, and payment instructions sent by email only.
  • The supplier payment fraud prevention playbook rests on one rule: verify every account change through a second channel, such as a phone or video call.
  • Fraudsters time their messages around real payment dates, which is why the fake instructions look so convincing.
  • If money already went to the wrong account, act within hours: contact your bank, the supplier, and document everything.

What is supplier payment fraud?

Supplier payment fraud is a scam in which criminals trick a buyer into sending payment to an account the real supplier does not control. The fraudster typically impersonates the supplier, often by email, and provides new bank details with a plausible story: the old account is under audit, the company changed banks, the finance manager is on leave. The buyer wires the deposit or balance to the new account, the money disappears, and the real supplier, who never sent the message, still expects to be paid. Good supplier payment fraud prevention is therefore not about banking technology. It is about making sure the instructions you follow actually came from your supplier.

This fraud works because it hijacks a legitimate process. You were going to pay the supplier anyway; the criminal just redirects the payment. There is no malware to detect and no suspicious website to avoid. The email looks like every other email from the supplier, sometimes because the criminal has been reading the real email thread for weeks. Recognizing the pattern early is what makes supplier payment fraud prevention possible at all.

What are the red flags?

The fact sheet for this topic names the three big ones, and they deserve to be memorized.

Last-minute bank account changes. A supplier that has used the same account for a year does not casually switch banks the week your balance is due. Any change of beneficiary, account number, or bank, especially one announced close to a payment date, is the single strongest warning sign. Treat every account change as guilty until proven innocent.

Pressure to pay quickly. The fake message almost always includes urgency: pay today to keep the production schedule, the new account is only valid this week, the finance department closes early. Urgency is a tool. It pushes you to skip the verification step, which is exactly what the fraudster needs.

Email-only instructions. Real suppliers discuss account changes through multiple channels or at least accept a confirmation call. When the "new account details" arrive by email and the sender discourages calling, or provides a new phone number that conveniently reaches a different person, the channel itself is the tell.

Secondary signs reinforce the picture: slight changes to the sender's email address, awkward language from a contact who usually writes fluently, or instructions that contradict what was agreed in the contract. None of these proves fraud on its own. Together with an account change, they should stop the payment cold. Memorizing these signs is the cheapest form of supplier payment fraud prevention there is.

How do fraudsters actually operate?

Understanding the method makes the defense obvious. In the common version, criminals compromise or spoof the supplier's email. Sometimes they hack the actual mailbox; sometimes they register a lookalike domain that differs by one letter. They then monitor the correspondence, learning the order numbers, the amounts, the payment schedule, and the names of the people involved. When the balance payment approaches, they strike with the account-change message, written in the supplier's style and referencing real details from the thread.

In a cruder version, the fraudster does not need email access at all. Fake "supplier" profiles contact buyers who posted sourcing requests publicly, or scammers intercept the early stages of a relationship before the buyer knows the supplier's real communication patterns. Any supplier payment fraud prevention routine has to cover both versions: the sophisticated interception of an existing relationship and the crude impersonation of a new one.

Either way, the money moves fast. Fraudulent accounts are emptied within hours or days, often through chains of transfers designed to make recovery hard. Speed is the criminal's protection, which is why your response speed matters if the worst happens.

Which verification routines actually stop fraud?

One routine stops nearly all of it: verify every bank account change through a second channel before paying. When new account details arrive, call the supplier on a phone number you already have, not the number in the suspicious email, and confirm the change with a known contact. A video call works too. What matters is that the confirmation travels through a channel the fraudster does not control. A supplier payment fraud prevention routine that does this one thing consistently defeats the standard attack completely.

Build the routine into your payment process so it does not depend on anyone's memory in a busy week. A simple rule works: no payment goes out on changed details without a second-channel confirmation, no exceptions, and the confirmation is documented with a name, a time, and what was confirmed. That five-minute call is the highest-value habit in all of supplier payment fraud prevention. New staff learn the rule on day one. Suppliers are told up front that you will always call to confirm account changes, which also protects the real supplier from being blamed for a fraud it did not commit.

Additional layers help. Keep the supplier's verified bank details on file from the start of the relationship and compare every new instruction against them. Be suspicious of any payment instruction that arrives only by email, even without an account change. And separate duties where you can: the person who receives the payment instruction should not be the same person who approves the wire without a check.

What should you do if the money already went to the wrong account?

Act immediately, because the first hours decide whether recovery is possible. Contact your bank at once and ask about recalling or freezing the transfer; wire recalls work best when started the same day. Tell the real supplier what happened so it knows the payment it expected is not coming and can help confirm the fraud in writing. Document everything: the fraudulent message with full headers, the transfer records, and the timeline.

Then report it. File a report with your local police or fraud reporting body, and ask your bank about the reporting channels for cross-border wire fraud. Recovery is uncertain and often partial, which is the honest truth, but fast action meaningfully improves the odds. At its core, supplier payment fraud prevention is mostly about stopping the payment; once the payment has gone, the playbook switches to speed, documentation, and realistic expectations.

Do not let embarrassment slow you down. Teams that have just been defrauded sometimes hesitate to tell the supplier or the bank, hoping the money will somehow come back on its own. It will not. Every hour of delay is an hour the criminal uses to move the funds further away. Preparation beats reaction, which is why supplier payment fraud prevention belongs in the payment routine rather than in a crisis plan.

Who needs supplier payment fraud prevention most?

Any business that wires money to overseas suppliers on the basis of emailed instructions, which is nearly every importer. The risk scales with payment size and with how many people touch the payment process: more hands, more chances for a fake instruction to slip through.

Small teams are not safer by default. A one-person operation where the owner handles every payment has fewer handoffs but also no second pair of eyes. Supplier payment fraud prevention is a routine, not a department, and the smallest businesses can run it with a phone call and a notebook.

How do you build fraud prevention into the normal payment process?

Treat fraud checks as part of paying, not as an extra chore. The payment routine for every supplier order should include: confirming the beneficiary details match what is on file, requiring second-channel verification for any change, and keeping a written record of who confirmed what. Review the routine with everyone who touches payments twice a year, because staff turn over and memories fade. When onboarding a new supplier, establish the verified contact numbers and the verified bank details at the start, before any money is discussed.

The mindset shift is small but important. Most buyers treat payment as the finish line of an order: goods are ready, send the money, done. Effective supplier payment fraud prevention asks you to treat payment as a security step in its own right, with the same discipline you apply to quality inspection. The check takes five minutes. The fraud it prevents can cost the entire order value. Make it automatic and supplier payment fraud prevention stops being something you worry about.

FAQs

### Can fraud happen with a supplier I have used for years?

Yes. Long relationships are attractive targets because the payment amounts are large and the email threads give criminals rich material to imitate. That is why supplier payment fraud prevention matters most exactly where trust is highest, because trust is what the fraud exploits.

### What if the supplier really did change banks?

Then the second-channel check will confirm it, and you pay the new account with confidence. Legitimate suppliers expect the verification call and are not offended by it. A real account change survives verification; a fraudulent one does not.

### Should I verify details that have not changed?

For routine payments to long-standing verified details, most businesses do not re-verify every time. The critical trigger is any change, or any instruction that arrives through an unusual channel. Solid supplier payment fraud prevention focuses verification where the risk is: on changes and anomalies.

### Can my bank detect the fraud for me?

Banks have fraud monitoring, but a wire to a new beneficiary that you authorized yourself looks like a normal payment to the bank. The bank cannot know the email was fake. This is why supplier payment fraud prevention sits with the buyer, not the bank.

### What records should I keep?

Keep the supplier's verified bank details, every payment instruction received, the second-channel confirmations with names and times, and all transfer records. If fraud occurs, this file is what your bank and the authorities will ask for first.