Calaois aistrithe sreinge, camscéimeanna sonraisc, agus aisghairm bainc FFKC¶

Discovering that your company, real estate escrow buyer, nonprofit organization, or family just wired tens or hundreds of thousands of dollars to a fraudster's bank account through a Business Email Compromise (BEC), spoofed vendor invoice, or real estate closing-cost wire hijack is an extreme, minute-by-minute financial emergency. Unlike credit card fraud, where consumers are protected by zero-liability rules and 60-day chargeback windows, a bank wire transfer (Fedwire, SWIFT, CHAPS, or SEPA) or commercial ACH push is designed to settle as irrevocable cash. However, a fraudulent wire transfer is NOT instantly hopeless if you act within the first 24 to 48 hours. Criminal syndicates cannot easily walk into a domestic branch and withdraw $250,000 in physical paper currency; the stolen funds must first sit inside a domestic "money mule" account or pass through correspondent clearing banks before being wired offshore to Hong Kong, China, the United Arab Emirates, Turkey, or converted at a cryptocurrency exchange. If you trigger a formal interbank Hold Harmless / Letter of Indemnity Recall (SWIFT MT192 / pacs.004) and engage national law enforcement's Financial Fraud Kill Chain (FFKC) before the receiving bank sweeps the funds out, banks and federal agents freeze and recover hundreds of millions of dollars in stolen wires every single year.

If the wire fraud involves an active physical kidnapping, hostage demand, or immediate threat of violence, call your local emergency number (911 in the United States and Canada, 112 across the European Union, 999 in the United Kingdom) or consult our directory of international uimhreacha éigeandála immediately. For all corporate invoice scams, real estate title wire hijacks, and personal wire fraud, drop everything and execute the 6-step emergency recall sequence below within the next 15 minutes.

Déan é seo anois¶

1. Call your Originating Bank's Wire Fraud / Treasury Operations Desk within 5 minutes and demand an immediate "Fraud Recall with a Hold Harmless / Letter of Indemnity": Do not wait in line at a retail branch teller window, and do not send a secure web message. Call the phone number on your wire department receipt or business treasury hotline and use these exact words: "We are the victim of an active Business Email Compromise wire fraud on a wire sent on [Date/Time] for [$Amount]. I need you to immediately transmit an emergency Fraud Recall request (Fedwire Recall / SWIFT MT192 / camt.056) to the Receiving Bank AND issue an interbank Hold Harmless / Letter of Indemnity on our behalf so the Receiving Bank's Fraud Department freezes the beneficiary account immediately."
2. Simultaneously look up the Fraudulent Receiving Bank by its Routing / ABA / SWIFT BIC code and call the Receiving Bank's Fraud Department directly: Do not wait 6 hours for your bank's back office to send a message to the scammer's bank. Look at the fraudulent wire instructions the scammer sent you, find the Receiving Bank Name and ABA Routing Number / IBAN / SWIFT BIC, call that bank's corporate security or wire fraud hotline directly, and give them the IMAD / OMAD number (for US Fedwire), UETR (for SWIFT), exact dollar amount, and the Beneficiary Account Number. While a receiving bank will not wire the money back to you over the phone, a direct alert from a victim combined with the IMAD/OMAD trace number frequently prompts the Receiving Bank's internal fraud analysts to place an immediate administrative fraud freeze on the scammer's account while they await your bank's formal Letter of Indemnity.
3. File an emergency FBI IC3 Complaint (ic3.gov) in the United States to activate the FBI Recovery Asset Team (RAT) and the Financial Fraud Kill Chain (FFKC): If the wire originated from or passed through a United States bank account within the last 72 hours (especially if $50,000+ or any real estate closing amount), go to ic3.gov right now and submit an online complaint. Clearly enter "BEC / Wire Transfer Fraud - Sent Within Last 72 Hours" at the top of the description along with the exact originating bank, receiving bank, ABA routing numbers, account numbers, and IMAD/OMAD trace numbers. The FBI's Recovery Asset Team (RAT) operates a direct real-time communication channel with domestic banks and FinCEN to place federal administrative holds on domestic money-mule accounts (achieving an historic freeze success rate exceeding 70 percent when reported before the wire hops offshore).
4. In the UK, EU, Canada, or Australia, trigger your national interbank fraud freeze line immediately:
   • United Kingdom: Call your bank's fraud line using the 159 Stop Scams hotline (simply dial 159), report immediately to Action Fraud (0300 123 2040: select the live active fraud option if money is currently in transit), and invoke the Payment Systems Regulator (PSR) Mandatory APP Fraud Reimbursement Rules (effective October 2024 for Faster Payments and CHAPS).
   • European Union: Demand an immediate SEPA Credit Transfer Recall (camt.056 / pacs.004) for FRAD (Fraudulent Origin) via your bank and file an immediate police report so national Financial Intelligence Units (FIU) can issue an emergency cross-border freeze under EU AML directives.
   • Canada & Australia: Report immediately to your bank's wire recall desk, the Canadian Anti-Fraud Centre (CAFC) / local police financial crimes unit, or the Australian National Anti-Scam Centre / AFCX Fraud Reporting Exchange (cyber.gov.au).
5. Do NOT email the scammer, do NOT ask "Did you get the wire?", and do NOT alert the compromised email thread: The moment the scammer realizes you have discovered the fraud, they will immediately log into the receiving money-mule bank account and sweep any remaining balance out via instant crypto rails or international wires. Keep the scammer completely in the dark while your bank and the FBI freeze the destination account.
6. Preserve the compromised email headers (EML / MSG files) and isolate the breached mailbox: Do not delete the fraudulent invoice emails. Have your IT team export the raw message headers (Authentication-Results, Received: from, Reply-To) and check both your own email system and your vendor's email system for hidden inbox forwarding rules (see our guide on hacked email account: hidden forwarding rules and recovery).

Decision tree: executing an emergency bank transfer recall by payment rail¶

Use this rapid operational flowchart to execute the exact recall protocol for your specific payment network (Fedwire, ACH, SWIFT, or CHAPS/Faster Payments):

flowchart TD
    A["Aimsíodh Sreang Chalaoiseach nó Aistriú Leictreonach"] --> B["Aithin Iarnród Íocaíochta Beacht & Faigh Rianuimhir Láithreach"]
    B --> C{"Cén Iarnród Íocaíochta Ar Úsáideadh?"}
    C -->|"Sreang Intíre SAM (Fedwire)"| D["Faigh Uimhir Lorgaireachta IMAD / OMAD 22-Carachtar ón mBanc Tionscnaimh"]
    C -->|"Sreang Idirnáisiúnta (SWIFT)"| E["Faigh Cóip 36-Carachtar SWIFT UETR & MT103 ón mBanc Tionscnaimh"]
    C -->|"Aistriú ACH Intíre SAM"| F["Faigh Rianuimhir 15-Digit ACH ón mBanc Tionscnaimh"]
    C -->|"Íocaíochtaí níos tapúla sa RA / CHAPS nó SEPA AE"| G["Faigh Íocaíochtaí Níos Tapúla FPID / CHAPS Tag nó ID Deireadh le Deireadh SEPA"]
    D --> H["1. Seolann Banc Tionscnaimh Aisghairm Calaoise Éigeandála + Slánaíocht Neamhdhíobhálach a Choinneáil chuig an mBanc Glactha"]
    E --> H
    F --> I{"Cé mhéad lá gnó ó shocrú ACH?"}
    I -->|"Sa scuaine / Same Day"| J["Cealaigh ACH gan Bhaisc nó Eisigh Láithreach Tuairisceán/Aisghairm NACHA ODFI"]
    I -->|"1 go 5 Lá Gnó"| K["Éileamh ODFI Seol Aisghairm ACH + Litir Slánaíochta chuig Deasc Calaoise RDFI"]
    G --> L["Diailigh 159 (RA) / Líne Calaoise Bainc: Truicear Reo Idirbhainc Láithreach & Éileamh Aisíocaíochta APP PSR"]
    H --> M["2. Deasc Calaoise Bainc Glactha Glaonna Íospartaigh go Díreach le hUimhir Chuntais IMAD/UETR & Tairbhí"]
    K --> M
    M --> N["3. Comhdaigh FBI IC3 (ic3.gov) laistigh de 72h chun FBI RAT / Calaoise Airgeadais Kill Chain + Tuarascáil Póilíní Áitiúil a ghníomhachtú"]

Céim 1: Na haitheantóirí teicniúla ríthábhachtacha a chaithfidh tú a fháil ó do bhanc sa chéad 15 nóiméad¶

Nuair a ghlaonn tú ar do bhanc, ar an mbanc glactha, agus ar an FBI nó ar na póilíní, ní leor é ag rá "Rinneamar $142,000 a shreangú go Bank of America ar maidin" chun idirbheart a aimsiú i gcóras imréitigh a phróiseálann na milliúin teachtaireachtaí in aghaidh na huaire. Ní mór duit an uimhir chruinn chripteagrafach/rianta imréitigh a iarraidh ar do Bhanc Tionscnaimh láithreach don iarnród íocaíochta a úsáideadh:

Why Intermediary / Correspondent Banks Are Your Best Friend in an International Wire Recall¶

If the scammer tricked you into wiring USD or EUR to an offshore bank in Hong Kong, China, Singapore, Dubai, or Eastern Europe, an international SWIFT wire rarely teleports directly from your local US or European bank to the foreign bank in 5 seconds.

Instead, international wires travel through a chain of Correspondent (Intermediary) Banks (such as JPMorgan Chase New York, Citibank N.A., Bank of New York Mellon, Deutsche Bank Frankfurt, or Standard Chartered) and must pass through Time-Zone Cutoffs and Automated Sanctions / AML Screening Filters. Because Asia-Pacific and European banking hours do not overlap with North American afternoon hours, an international wire sent at 14:00 New York time often sits inside a New York Correspondent Bank queue or sits uncredited inside the foreign receiving bank's morning incoming validation queue for 8 to 24 hours.

• Action to Take Immediately: Ask your bank to check the SWIFT gpi Tracker using your 36-character UETR. The SWIFT gpi Tracker shows in real time which exact Intermediary Bank is currently holding the funds (In Transit at Intermediary vs. Credited to Beneficiary).
• If the wire is still sitting at an Intermediary Correspondent Bank in New York, London, or Frankfurt, your bank can send a priority SWIFT MT192 / camt.056 Stop/Recall directly to that Intermediary Bank (and you can alert the Intermediary Bank's New York/London wire room with the UETR), halting the money before it ever leaves domestic jurisdiction.

Phase 2: Activating the FBI Financial Fraud Kill Chain (FFKC) and law enforcement holds¶

When you are dealing with wire fraud over $10,000 (and especially $50,000+ corporate or real estate closing wires), your bank's retail fraud department is only half of the equation. Law enforcement agencies possess statutory powers to trigger emergency freezes at receiving banks and cryptocurrency ramps even before a formal court warrant is signed.

1. United States: How the FBI Recovery Asset Team (RAT) and FFKC Work¶

Established in 2018 inside the FBI's Internet Crime Complaint Center (IC3), the Recovery Asset Team (RAT) streamlines communication between FBI field offices, domestic financial institutions, and the Financial Crimes Enforcement Network (FinCEN) under the Financial Fraud Kill Chain (FFKC) protocol.

To maximize the speed of an FFKC recall, file your report at ic3.gov immediately (do not wait until tomorrow morning to consult a lawyer first, file the ic3.gov form within the first hour of discovering the theft) and include every single field below with zero typos:

1. Victim Information: Your legal name, company name, telephone number (use a direct cell phone number that you will answer 24/7 on the first ring), and an uncompromised email address.
2. Originating Bank Details: Full bank name, branch address, your originating account number, ABA routing number, and the name/phone number of the bank fraud officer you spoke with.
3. Primary Beneficiary (Scammer) Bank Details: Full name of the receiving bank, receiving bank city/state/country, ABA Routing Number / SWIFT BIC, the Beneficiary Account Number, and the exact Beneficiary Name written on the fraudulent wire instructions.
4. Intermediary / Correspondent Bank Details (if applicable): Any intermediary bank name, SWIFT BIC, or routing number listed on the wire sheet.
5. Transaction Metadata: Exact dollar amount down to the cent, exact timestamp and date the wire was executed, and the 22-character Fedwire IMAD/OMAD number or 36-character SWIFT UETR.
6. ** Glao Teileafóin Leantach Tar éis A Chur isteach ic3.gov**:
   • Sábháil/phriontáil an chóip PDF de do thíolacadh ic3.gov gearán láithreach.
   • Call your local FBI Field Office (fbi.gov/contact-us/field-offices) and your local United States Secret Service (USSS) Field Office (secretservice.gov/contact/field-offices, the Secret Service Cyber Fraud Task Forces co-lead BEC wire recalls alongside the FBI).
   • Tell the duty agent on the phone: "We just submitted an emergency IC3 complaint for an active Business Email Compromise wire transfer of [$Amount] sent [X] hours ago. We have the Fedwire IMAD / SWIFT UETR number in hand and request urgent coordination with the IC3 Recovery Asset Team for a Financial Fraud Kill Chain recall."

2. United Kingdom: The 159 Hotline and the October 2024 PSR Mandatory APP Fraud Reimbursement Rules¶

If you or your micro-enterprise/charity in the United Kingdom were tricked into sending a bank transfer (known in UK banking law as Authorised Push Payment (APP) Fraud, where a scammer tricks you into authorizing a Faster Payment or CHAPS wire via a fake invoice, conveyancing solicitor impersonation, or bank impersonation scam):

1. Dial 159 Immediately: Connects you directly to your UK bank's fraud prevention desk to initiate an urgent Faster Payments / CHAPS interbank freeze request to the receiving bank.
2. Invoke Your Statutory Right to Mandatory Reimbursement Under Payment Systems Regulator (PSR) Policy PS23/4 & PS24/3:
   • Under the landmark UK Payment Systems Regulator rules that took legal effect on 7 October 2024, UK payment service providers (PSPs) are legally required to reimburse victims of eligible Authorised Push Payment (APP) scams sent over Faster Payments or CHAPS up to £85,000 within 5 business days (or up to 35 business days if the bank invokes the "stop the clock" investigation provision), unless the bank can prove the consumer acted with "gross negligence" (a very high legal bar under the Consumer Standard of Caution) or was complicit in the fraud.
   • Even if the stolen fundsexceed £85,000 (for example, a £250,000 house deposit conveyancing scam), you can claim the first £85,000 under the mandatory PSR scheme AND pursue the remainder up to £430,000 by escalating a complaint to the Financial Ombudsman Service (FOS, financial-ombudsman.org.uk) if the sending or receiving bank failed its anti-fraud monitoring duties or under the Contingent Reimbursement Model (CRM) legacy principles.

Phase 3: Specific action plans by wire fraud scenario¶

How the fraud happened determines who else must be notified immediately to stop secondary thefts and establish legal liability.

Scenario A: Real Estate Closing / Title & Escrow Wire Hijack (Homebuyer Down Payment Stolen)¶

Real estate closing wire fraud is one of the highest-dollar crimes affecting families. Attackers compromise the email account of a Real Estate Agent, Mortgage Broker, Title Company, or Closing Attorney months in advance, silently monitor the calendar for your closing date, and email you 24 to 48 hours before closing with a realistic PDF attachment: "URGENT: Updated Wire Instructions for [Title Company Name] due to our end-of-month escrow account audit."

If you just wired your home down payment or closing cash to a scammer: 1. Execute Steps 1, 2, and 3 from "Do this now" immediately: Get the IMAD/OMAD from your bank, demand an immediate Hold Harmless Recall, call the receiving bank's fraud desk directly, and file at ic3.gov within the first 30 minutes. 2. Cuir glaoch ar an gCuideachta Fíortheideal / Aighne Deiridh ar an nguthán Láithreach: - Abair le hoifigeach eascró agus le habhcóide ginearálta na Cuideachta Teidil gur atreoraíodh do shreang dúnta trí ríomhphost spoofed nó comhréiteach. - Iarr orthu gach loga freastalaí ríomhphoist a chaomhnú ar a ndeireadh, ag seiceáil go sonrach ar logáil an t-ionsaitheoir isteach go díreach i gcuntas Microsoft 365 / Google Workspace nó i gcuntas ríomhphoist an Realtor de chuid Title Company. (Faoi dhlíthe faillí stáit na Stát Aontaithe agus faoi theagaisc lochta comparáideacha an Chóid Tráchtála Aonfhoirmigh, tá sé ríthábhachtach cén ar sáraíodh a chóras ríomhphoist gan MFA leordhóthanach a chinneadh mura bhfuil an sreang 100 faoin gcéad ar ais ag na bainc). - Fiafraigh den Chuideachta Teidil an iompraíonn siad Cumhdach Formhuinithe Cibearchoireacht / Innealtóireacht Shóisialta / Calaoise Sreang nó cleamhnacht le frithgheallaí teidil (amhail Teideal Náisiúnta Fidelity, An Chéad Mheiriceánach, an Sean-Phoblacht, nó Teideal Stewart), agus coinníonn go leor acu a gcomhghuaillíochtaí tiomnaithe 24/7 Mear Aisghabháil Wire le teagmhálacha díreacha feidhmiúcháin ag bainc mhóra. 3. Cuir in iúl don Díoltóir agus Gníomhairí Réadmhaoine i Scríbhinn: Má tá do chistí dúnta reoite in imscrúdú gníomhach FBI/aisghairme idirbhainc, iarr ar aturnae réadmhaoine fógra a sheoladh láithreach ag iarraidh gearr ** Síneadh Dáta Deiridh an Chonartha / Aguisín le leigheas Force Majeure ** ionas nach ndéanann tú d'éarlais airgid dícheallach a fhorghéilleadh go huathoibríoch agus an aisghairm tugtha chun críche laistigh den fhuinneog idirbhainc 5 go 14 lá.

Cás B: Calaois Sonraisc Díoltóra Corparáidigh (Astreo Cuntais Iníoctha B2B)¶

I scam B2B Sonrasc Díoltóra, do Chuntais Iníoctha (AP) faigheann an roinn ríomhphost ó sholáthraí fíor, fadbhunaithe (billing@supplier.com nó fearann ​​cuma mhaith billing@suppIier.com) ag rá: "Tabhair faoi deara go bhfuil ár gcuntas oibriúcháin tráchtála aistrithe ó Wells Fargo go Truist Bank; nuashonraigh ár dtreoracha ACH/Wire don Sonrasc #90412."

Má d’íoc do ghnóthas díreach sonrasc fíor isteach i gcuntas bainc calaoiseach: 1. ** An Banc Coinnigh Aisghairm Neamhdhíobhálach agus FBI ic3.gov chomhdú láithreach**. 2. Socraigh Cé leis a Sáraíodh an Freastalaí R-phoist I ndáiríre (Mise vs. Do Dhíoltóir): - Iarr ar d'fhoireann Slándála TF an t-amhábhar a iniúchadh EML ceanntásca teachtaireachta an ríomhphoist chalaoiseacha: - Sínigh gur Hackáladh Fíor-Ríomhphost an Díoltóra (Comhréiteach Fíor Díoltóra): Ritheadh ​​​​an ríomhphost SPF: PASS, DKIM: PASS, agus DMARC: PASS for the vendor's genuine domain (@supplier.com), agus tháinig sé ó fhreastalaithe ríomhphoist fíor Microsoft/Google. Ciallaíonn sé seo go bhfuil an t-ionsaitheoir ina shuí laistigh de bhosca isteach fíor ríomhphoist do dhíoltóra faoi láthair. Cuir glaoch ar CFO agus Stiúrthóir TF do dhíoltóra ar an teileafón láithreach, toisc go bhfuil an t-ionsaitheoir céanna sin ag seoladh treoracha sreinge bréige chuig gach custaiméir eile i mbosca isteach do dhíoltóra faoi láthair. - Sign of a Lookalike Domain / Display Name Spoof: The email came from @supp1ier.com nó @supplier-payments.com (check whois creation date, usually registered within the last 14 days). This means either your own employee's mailbox was breached (allowing the hacker to read the original invoice PDF and create a matching lookalike domain) OR the vendor's mailbox was breached and the hacker set up a lookalike Reply-To domain so the vendor wouldn't see the replies in their Sent folder. 3. Put Your Cyber Insurance & Crime Insurance Carrier on Immediate Notice: - Most commercial Cyber Liability Insurance policies and Commercial Crime / Fidelity Bond policies include a Social Engineering Fraud / Funds Transfer Fraud / Invoice Manipulation coverage endorsement, AND they include 24/7 Incident Response Forensics & Legal Breach Coach hotlines at zero out-of-pocket cost beyond your deductible. - Warning on Insurance Notice Deadlines: Many cyber insurance policies require notification within 24 to 72 hours of discovering a fraudulent wire transfer. Call the 24/7 claims hotline on your policy declaration page today.

Cás C: POF/Pearsanú Feidhmeannach ("Fáil faoi Rún Práinne / Cárta Bronntanas / Athrú Párolla")¶

If an employee was tricked via email, SMS text, WhatsApp, or a Deepfake AI Voice/Video Call impersonating the CEO or Managing Partner into wiring money to an external account, or if Payroll was tricked into changing an executive's Direct Deposit (ACH) uimhir ródaithe: 1. Le haghaidh Athstiúrtha Taisce Dhíreach Párolla: Déan teagmháil le do Phróiseálaí Párolla (ADP, Gusto, Paychex, Workday, Rippling, UKG) laistigh de nóiméid agus éileamh ** Aisghairm Láithreach NACHA ACH / Aisiompú ** agus Reo Calaoise ar an gcárta réamhíoctha glactha nó uimhir ródaithe bainc (Green Dot, Chime, Sutton Bank, Bancorp, nó Pathward go minic). Tá deasca tiomnaithe um aisiompú calaoise mórchóir ag próiseálaithe párolla le caidreamh díreach ag bainc eisiúna nua-bhainc.

Céim 4: Conas a insint an bhfuil do líonra féin ionfhabhtaithe go fóill agus an dara goid sreinge a chosc¶

Ionsaithe a n-éiríonn leo calaois sreinge $100,000+ in aghaidh eagraíochta a bhaint amach beagnach i gcónaí a dhéanann iarracht an dara huair laistigh de 7 go 14 lá, ag díriú ar shonrasc díoltóra oscailte eile a d’íoslódáil siad cheana ó do bhosca cuntasaíochta, nó trí ríomhphost a sheoladh chuig do chustaiméirí chun íocaíochtaí Infhaighte Cuntais ag teacht isteach a atreorú ó do chuideachta.

Críochnaigh an tIniúchadh Fóiréinseach 5 Phointe seo Sula nÚdarófar Aon Íocaíochtaí Breise¶

1. Déan iniúchadh ar Gach Bosca Poist Cuntasaíochta, Airgeadais, Feidhmeannachta agus Dlí le haghaidh Rialacha Hidden & Aipeanna OAuth:
   • Lean ár dtreoir ar hacked email account: hidden forwarding rules and recovery a rith Get-InboxRule -IncludeHidden thar gach bosca poist i d’eagraíocht, cúlghair aipeanna OAuth nach bhfuil aithne acu orthu, agus seiceáil rialacha iompair ríomhphoist Malartú ag leibhéal an tionónta.
2. Iniúchadh ID Entra / Logchomhaid Síniú Isteach Google Workspace (Impossible Travel agus Evilginx IPanna AitM Proxy):
   • Seiceáil logaí síniú isteach le 60 lá anuas le haghaidh naisc ó VPNanna tráchtála, ASNanna ó sholáthraí óstála (DigitalOcean, Linode, Stark Industries, M247, Choopa/Vultr, OVH), nó cathracha neamhaithnidiúla. Má bhí úsáideoir i gcontúirt ainneoin MFA a bheith cumasaithe aige, chliceáil siad nasc fioscaireachta Adversary-in-the-Middle (AitM) (Evilginx / Tycoon 2FA). Déan gach comhartha athnuachana a chúlghairm (Revoke-MgUserSignInSession) agus an fhoireann Airgeadais/Feidhmiúcháin a uasghrádú go Eochracha Slándála Crua-earraí FIDO2.
3. Seiceáil cé acu an raibh D’Ainm Fearainn le Daoine a Dhéanamh trí Fhearann ​​Atá Cosúil:
   • Seiceáil dnstwist (dnstwister.report) le haghaidh ainm fearainn do chuideachta. Má chláraigh ionsaitheoir fearann ​​​​cosúil ó thaobh amhairc (mar shampla cás íochtair a athsholáthar l le cás uachtair I, nó ionadú m le rn, nó ag cur -billing.com), cuir isteach éigeandála láithreach Fógra Bainte Anuas um Mhí-úsáid an Chláraitheora Fearainn chuig cláraitheoir agus soláthraí óstála an fhearainn chosúla (cuir san áireamh an EML ceanntásca a thaispeánann go bhfuil an fearann ​​á úsáid le haghaidh calaoise sreinge gníomhach, cuireann na cláraitheoirí fearainn fioscaireachta BEC gníomhach ar fionraí laistigh d’uaireanta nuair a chuirtear ceanntásca ar fáil dóibh).
4. Forfheidhmigh an Riail Órga um Shlándáil Sreang & ACH (Défhíorú Lasmuigh den Bhanna):
   • Ná fíoraigh treoracha sreinge/ACH nua nó athraithe trí ghlaoch a chur ar uimhir theileafóin atá priontáilte laistigh den ríomhphost nó ar an sonrasc PDF ceangailte. Cuireann an scamálaí a uimhir theileafóin Google Voice / dóire féin ar an sonrasc falsa PDF ionas gur féidir nuair a ghlaonn tú chun "a fhíorú", freagraíonn an scamálaí an guthán agus deimhníonn sé an uimhir ródaithe bréige.
   • Beartas Éigeantach: Ní mór gach aistriú sreinge, socrú díoltóra nua, nó athrú ar shonraí baincéireachta an díoltóra/párolla atá os cionn $1,000 a fhíorú trí ghlao a chur ar uimhir theileafóin atá ar eolas go maith, a fuarthas ó do mháistirchonradh díoltóirí as líne bunaidh nó ó eolaire poiblí neamhspleách, AGUS éilíonn **Comhmheas Dé-Rialaithe ** (tionscnaíonn fostaí amháin an sreang sa bhanc tairseach; scaoileann an dara hoifigeach neamhspleách an t-aitheantas).
5. ** Cumasaigh Positive Pay (le haghaidh Seiceálacha agus ACH) agus Seirbhísí Bailíochtaithe Cuntas**:
   • Cuir Bloic Dearfach Pá / Dochair ar siúl ar gach cuntas oibriúcháin tráchtála ionas nach féidir le páirtí seachtrach dochair ACH neamhúdaraithe a tharraingt.
   • Agus íocaíochtaí á seoladh sa RA (Confirmation of Payee / CoP), AE (IBAN-Name Check sainordaithe faoi Rialachán an AE um Íocaíochtaí Meandaracha), nó SAM (Early Warning Services / Nacha Account Validation), deimhnigh go bhfuil an t-ainm sealbhóir cuntais a sheol an líonra imréitigh ar ais ag teacht leis an ainm cuideachta atá beartaithe sula n-eisítear cistí.

Ceisteanna coitianta¶

Foinsí seiceáilte¶

• ** Biúró Cónaidhme Imscrúdaithe (FBI, Stáit Aontaithe Mheiriceá)**: Foireann Aisghabhála Sócmhainní (RAT) an Ionaid Ghearán Coireachta Idirlín (IC3), Prótacal Slabhra Maraithe Calaoise Airgeadais (FFKC), agus Fógraí Seirbhíse Poiblí Comhréiteach Ríomhphost Gnó (ic3.gov).
• Líonra Forfheidhmithe Coireanna Airgeadais (FinCEN, Roinn Státchiste na Stát Aontaithe): Comhairle maidir le Camscéimeanna Imposter agus Scéimeanna Míl Airgid / Clár Mearfhreagartha (RRP) le haghaidh Aisghairmeacha Trasteorann Sreanga (fincen.gov).
• Gníomhaireacht Chibearshlándála agus Infrastruchtúir (CISA) & Seirbhís Rúnda na Stát Aontaithe (Stáit Aontaithe Mheiriceá): Ag Cosaint i gCoinne Comhréiteach Ríomhphoist Gnó agus Calaoise Sreanga Réadmhaoine (cisa.gov, secretservice.gov).
• Rialtóir na gCóras Íocaíochta (PSR) & an tÚdarás um Iompar Airgeadais (FCA, An Ríocht Aontaithe): Ráiteas Beartais PS23/4 & PS24/3: Camscéimeanna Íocaíochta Brúigh Údaraithe (APP) a Chomhrac: Ceanglas Aisíocaíochta Éigeantach le haghaidh Íocaíochtaí níos tapúla agus CHAPS (Le héifeacht 7 Deireadh Fómhair, 2024) (psr.org.uk).
• An Chomhairle Eorpach um Íocaíochtaí (EPC, an tAontas Eorpach): Leabhráin Rialacha um Aistriú Creidmheasa SEPA (SCT) agus SEPA um Aistriú Creidmheasa Meandaracha (SCT Inst): Athghairm ar Bhunús Calaoiseach (FRAD / camt.056) (europeanpaymentscouncil.eu).
• Uniform Law Commission / American Law Institute (United States): Uniform Commercial Code (UCC) Article 4A: Funds Transfers (§ 4A-207 Míthuairisc ar Thairbhí; § 4A-211 Cancellation and Amendment of Payment Order) (uniformlaws.org).

Treoracha gaolmhara¶

• Cuntas ríomhphoist hacked: rialacha seolta ar aghaidh agus aisghabháil folaithe
• Bank account breach
• Deepfake voice clone and AI impersonation scams
• Iascaireacht agus cuntais chontúirt
• Cryptocurrency wallet drain and seed phrase compromise
• Camscéimeanna agus calaois