Invoice Fraud is Soaring - What you need to know

This report explains invoice fraud (Business Email Compromise), where attackers impersonate vendors or compromise legitimate email accounts to trick employees into wiring funds to fraudulent accounts. It describes common attack methods—email account compromise, spoofing/domain squatting, malware, and spear-phishing—identifies targets and impact (from small businesses to large firms), and provides defensive recommendations and incident response steps such as MFA, dual-approval transfer processes, security awareness training, and contacting banks/law enforcement after an incident.