{
  "slug": "vendor-bank-change-fraud",
  "title": "Vendor email compromise: the invoice is real, the bank account is not",
  "summary": "Vendor bank change fraud costs more per incident than any other BEC subtype. Callbacks and account validation cannot stop it. Here is the control that can.",
  "lede": "Vendor impersonation is the most expensive way a company loses money to email, and it is the one fraud where every control you already bought answers a question nobody asked. This is a slow, careful walk through why the callback fails, why account validation misses the point entirely, and what a control that actually works looks like at the endpoint where the damage happens.",
  "date": "2026-09-03",
  "reading_time": "18 min read",
  "category": "Fraud",
  "tags": [
    "vendor email compromise",
    "vendor bank account change fraud",
    "invoice fraud",
    "accounts payable fraud",
    "BEC",
    "supplier payment redirection",
    "vendor master file"
  ],
  "image": "https://cdn.twc.sh/images/igcache/Vendor%20Bank%20Change%20Fraud/1200_630/blog.jpg",
  "url": "/blog/vendor-bank-change-fraud.html",
  "wordcount": 4970,
  "related": [
    "deepfake-cfo-wire-fraud",
    "real-estate-wire-fraud",
    "approve-by-email-and-emoji"
  ],
  "schema": "Article"
}