The human cost of payment fraud
It happens to real professionalsat great companies
Ten documented cases. Real losses, real people, and the same missing control every time: nothing verified the instruction before the money left.
Sources: FBI IC3, public court filings and disclosures.
The scale
This is not rare. It is routine.
$3.05B
Lost to business email compromise in 2025.
FBI IC3
24,768
BEC complaints reported to the FBI in one year.
FBI IC3
$20.88B
Total internet-crime losses reported in 2025, up 26% year over year.
FBI IC3
Case: Business email compromise / CEO impersonation
The Finance Employee
He went to work that morning thinking he was doing his job well. The email looked exactly like every other instruction from the CEO. It had the right tone, the right urgency, the right language. He followed it.When the fraud was discovered, the professional shame was immediate. In cases like this, the employee is often the first one investigated. Careers end. Some are terminated even when they were the victim. Someone who spent years building a reputation for precision became the person who wired $54 million to criminals.
Case: Business email compromise / CEO impersonation
The Impersonated CEO
He never sent the email. He never authorized the wire. His name, his authority, and his voice were reconstructed by criminals and used against his own company.The executive who was impersonated carries the weight of knowing their identity was weaponized. The company survives. But the trust inside that finance department never fully recovers.
Case: Vendor payment diversion
The Parish Administrator
This was a church. The money didn't belong to a corporation with a fraud reserve. It came from years of congregant donations, capital campaigns, bake sales, legacy gifts from people who had passed.The administrator who approved the wire was a trusted, longtime member of staff with no reason to suspect anything. That person now carries the weight of what happened — the betrayal of a community's faith, in every sense of the word.
Case: Vendor payment diversion
The Contractor
He finished the job. His crew had already been paid — by him, on good faith, before the church's payment arrived. Weeks later, he called to ask where his money was.The contractor, a small business, went months without payment they had legitimately earned. The ripple hit people who never saw it coming.
Case: Phishing for ACH credentials
The CFO
She checked her email before she got out of bed. It was a Tuesday. The notification looked exactly like every other Microsoft alert she had seen. Eight minutes later her entire email account belonged to someone else and she had no idea.For weeks after that, she ran her company, made decisions, sent sensitive information, approved payments — all while someone was watching every word.
Case: Malware and credential theft / ACH takeover
The Healthcare IT Professional
In healthcare, $840,000 is staff. It is equipment. It is the margin that keeps a small regional clinic alive. In documented cases involving smaller practices, losses at this scale have triggered layoffs within 90 days.The IT person who was supposed to catch it sometimes becomes the scapegoat — even when the breach originated in software the organisation didn't control.
Case: Fraudulent invoice / fake vendor
The Ubiquiti Finance Team
No malware. No system breach. Just convincing emails and a process with no hard stop on large international wires.The day the loss was disclosed, the stock dropped. Shareholders who had nothing to do with the fraud absorbed part of it immediately. Approvals slowed. Vendor relationships strained. The operational cost of that cultural shift often rivals the original loss.
Case: Account takeover via payroll diversion
The Payroll Administrator
The fraud was invisible until payday, when employees called HR saying their paychecks never arrived.She is the one who has to answer those calls. She is also a victim — her credentials were stolen through phishing and her system was used against the people she was responsible for protecting.
Case: Unauthorized ACH debit via stolen account numbers
The Theater Producer
Eighteen months. The debits were sized to look like a recurring bill he might have forgotten about. That is the design. Small enough to blend in.It is a slow violation. Someone has been inside your financial life, quietly, for a year and a half. That reconciliation alone costs thousands in accounting time and pulls the owner away from running the business.
Case: Insider fraud
The Bank Vice President
Ten years. She sat in meetings about fraud prevention. She trained people on compliance. She had relationships with customers, colleagues, a reputation in the community.She knew every control — she may have designed some of them. And for a decade she used legitimate system access to pay her own bills through ACH. It surfaced only when an audit flagged anomalies in her approval patterns.
The difference is the hard stop.
Today
- Instructions trusted because the email looked right
- Callbacks to a number in the email footer
- No record of who verified what
- Loss absorbed by you, and by the person who pressed send
With Coffr
- Company, professional, account and instruction verified
- Independent sources, never the sender
- Permanent, tamper-proof record attached to every payment
- $5M guarantee for 90 days on every verified instruction
The guarantee
$5M backed by up to 5 million in insurance capacity by AAA+ providers.
Real protection behind every verified instruction.If a Coffr-verified instruction turns out to be fraudulent, we cover the loss. Not fine print — capital.
Start the conversation.
Speak with our team about your payment workflow and see how Coffr verifies every instruction before money moves.
See how you can be live in 10 minutes or less.