By Jami Theiller

Payment fraud poses a significant threat to businesses today, jeopardizing both financial stability and reputation. As we all increasingly rely on digital transactions, the risk of fraudulent activities escalates. Here are a few tips on how you can fortify your defenses against payment fraud.

Understand the Threat

Payment fraud can take on various forms, including social engineering fraud, check fraud, and electronic banking fraud. These schemes exploit vulnerabilities in your payment processes to divert funds to unauthorized recipients. The consequences can be severe, with businesses losing billions of dollars annually to fraudsters.

Key Statistics

The statistics on business payment fraud reveal alarming trends. According to the 2023 Association for Financial Professionals Payments Fraud and Control Survey, 65% of organizations experienced payments fraud attacks/attempts in 2022, with 71% falling victim to business email compromise scams. Checks remain the most vulnerable payment method to fraud, with 63% of respondents reporting fraud activity via checks. Additionally, instances of fraud via commercial cards, ACH credits, and virtual cards have been on the rise. Despite efforts to recover lost funds, 44% of organizations were unsuccessful in recouping any stolen funds.¹

Types of Payment Fraud

As mentioned above, three common types of payment fraud include social engineering fraud, check fraud, and electronic banking fraud. Below are brief descriptions of each:

• With social engineering fraud, perpetrators manipulate employees into authorizing fraudulent payments through deceptive communication channels such as via compromised emails or sham phone calls.
• Check fraud occurs when criminals exploit stolen or forged checks to siphon funds from business accounts without authorization.
• Electronic banking fraud entails hackers gaining unauthorized access to online banking accounts, which enables them to transfer funds illicitly for financial gain.

Preventive Measures

To combat these crimes and the potential for substantial losses, implement the following measures at the very least:

• Employee Education – Foster a culture of vigilance by educating your staff about common fraud tactics and encouraging them to report suspicious activity promptly.
• Partner with a Trustworthy Bank – Select a bank that offers robust fraud protection, such as check positive pay, ACH positive pay, and IP restrictions to safeguard your financial transactions.
• Implement Strict Internal Controls – Enforce dual-control procedures, mandate verbal confirmation for payment instructions, conduct surprise internal audits, and restrict banking activities to dedicated computers.
• Maintain Stringent Access Controls – Ensure that employees with online banking access have unique login credentials and monitor transaction patterns for anomalies.
• Regular Reconciliation – As a business owner, actively participate in reconciling banking accounts to detect and address any discrepancies promptly.

Payment fraud remains a persistent threat, but proactive measures can mitigate the risks and safeguard your business assets. By prioritizing fraud prevention and implementing comprehensive safeguards, you can shield your business from potential financial devastation. Stay vigilant, stay informed, and stay protected against payment fraud.

¹ https://www.afponline.org/training-resources/resources/survey-research-economic-data/Details/payments-fraud/

Jami Theiller is senior vice president, cash management sales manager, at First Citizens Community Bank headquartered in Mansfield, Pa. Theiller has over 18 years’ experience in cash management services from her time with Graystone, Susquehanna, BB&T, and First Citizens Community Bank (FCCB). She was FCCB’s employee of the year in 2022. Theiller can be reached at jatheiller@myfccb.com.

Sign up for PICPA's weekly professional and technical updates by completing this form.

^{Statements of fact and opinion are the authors’ responsibility alone and do not imply an opinion on the part of the PICPA's officers or members. The information contained herein does not constitute accounting, legal, or professional advice. For actionable advice, you must engage or consult with a qualified professional.}