Podvody s bankovým prevodom, podvody s faktúrami a stiahnutie z banky FFKC¶

Zistenie, že vaša spoločnosť, kupujúci v úschove nehnuteľností, nezisková organizácia alebo rodina práve poslali desiatky alebo stovky tisíc dolárov na bankový účet podvodníka prostredníctvom obchodného e-mailového kompromisu (BEC), sfalšovanej faktúry dodávateľa alebo ukradnutia nákladov na uzavretie nehnuteľnosti, je extrémna, minútu po minúte minútová finančná núdza. Na rozdiel od podvodov s kreditnými kartami, kde sú spotrebitelia chránení pravidlami nulovej zodpovednosti a 60-dňovými lehotami na vrátenie platby, bankový prevod (Fedwire, SWIFT, CHAPS, alebo SEPA) alebo komerčné ACH push je určený na vyrovnanie ako neodvolateľná hotovosť. Avšak podvodný bankový prevod NIE JE okamžite beznádejný, ak konáte v priebehu prvých 24 až 48 hodín. Zločinecké syndikáty nemôžu ľahko vstúpiť do domácej pobočky a vybrať 250 000 USD vo fyzickej papierovej mene; ukradnuté prostriedky sa musia najskôr nachádzať na domácom účte „mulíc peňazí“ alebo prejsť cez korešpondenčné zúčtovacie banky predtým, ako sa prevedú na pobrežie Hongkongu, Číny, Spojených arabských emirátov, Turecka alebo sa prevedú na burze kryptomien. Ak spustíte formálne medzibankové Hold Harmless / Letter of Indemnity Recall (SWIFT MT192 / pacs.004(FFKC)** predtým, ako prijímajúca banka zmietne finančné prostriedky, banky a federálni agenti zmrazia a získajú späť stovky miliónov dolárov v ukradnutých bankách každý jeden rok.

Ak podvody zahŕňajú aktívne fyzické únosy, vyžiadanie rukojemníkov alebo bezprostrednú hrozbu násilia, zavolajte na miestne tiesňové číslo (911 v Spojených štátoch a Kanade, 112 v celej Európskej únii, 999 v Spojenom kráľovstve) alebo si pozrite náš adresár medzinárodných tiesňové čísla okamžite. V prípade všetkých podvodov s firemnými faktúrami, krádeží nehnuteľností a osobných bankových podvodov všetko zahoďte a do 15 minút vykonajte nižšie uvedenú 6-krokovú sekvenciu núdzového stiahnutia.

Urobte to teraz¶

1. Do 5 minút zavolajte na oddelenie bankového prevodu/pokladničné operácie svojej pôvodnej banky a požiadajte o okamžité „odvolanie z podvodu s nezávadným zadržaním / list o odškodnení“: Nečakajte v rade pri pokladni maloobchodnej pobočky a neposielajte zabezpečenú webovú správu. Zavolajte na telefónne číslo uvedené na účtenke bankového oddelenia alebo na horúcu linku obchodnej pokladnice a použite presne tieto slová: „Sme obeťou aktívneho podvodu s kompromitným prevodom z obchodného e-mailu na bankovom prevode odoslanom dňa [Dátum/čas] vo výške [$Amount]. Potrebujem, aby ste okamžite odoslali žiadosť o odvolanie z dôvodu podvodu (Fedwire Recall / SWIFT MT192 / camt.056) prijímajúcej banke A vystaviť v našom mene medzibankové Hold Harmless / Letter of Indemnity, takže oddelenie podvodov prijímajúcej banky okamžite zmrazí účet príjemcu."
2. Súčasne vyhľadajte podvodnú prijímajúcu banku podľa jej smerovacieho / ABA / SWIFT BIC kódu a zavolajte priamo na oddelenie podvodov prijímajúcej banky: Nečakajte 6 hodín, kým back office vašej banky pošle správu banke podvodníka. Pozrite si pokyny pre podvodné bankové prevody, ktoré vám podvodník poslal, nájdite Názov prijímajúcej banky a Smerovacie číslo ABA / IBAN / SWIFT BIC, zavolajte priamo na horúcu linku zabezpečenia alebo bankového podvodu danej banky a poskytnite im číslo IMAD / OMAD (pre US Fedwire), UETR (pre SWIFT a číslo príjemcu), presnú sumu účtu v dolároch.** Zatiaľ čo prijímajúca banka vám peniaze nepošle späť cez telefón, priame upozornenie od obete v kombinácii s IMAD/OMAD sledovacie číslo často vyzýva interných analytikov podvodov prijímajúcej banky, aby okamžite administratívne zmrazenie podvodov na účet podvodníka, kým čakajú na formálny list o odškodnení vašej banky.
3. Podajte núdzovú sťažnosť FBI IC3 (ic3.gov) v Spojených štátoch aktivovať tím FBI Recovery Asset Team (RAT) a Financial Fraud Kill Chain (FFKC): Ak prevod pochádzal alebo prešiel cez bankový účet v Spojených štátoch v priebehu posledných 72 hodín (najmä ak 50 000 $ alebo akákoľvek suma na uzavretie nehnuteľnosti), prejdite na ic3.gov práve teraz a odošlite online sťažnosť. V hornej časti popisu zreteľne zadajte „BEC/Wire Transfer Fraud - Odoslané za posledných 72 hodín“ spolu s presnou bankou pôvodu, prijímajúcou bankou, smerovými číslami ABA, číslami účtov a IMAD/OMAD sledovacie čísla. Tím FBI Recovery Asset Team (RAT) prevádzkuje priamy komunikačný kanál v reálnom čase s domácimi bankami a FinCEN na umiestňovanie federálnych administratívnych blokád na domáce účty s peniazmi (dosahuje historickú mieru úspešnosti zmrazenia presahujúcu 70 percent, keď je nahlásená skôr, ako sa drôt dostane na pobrežie).
4. V Spojenom kráľovstve, EÚ, Kanade alebo Austrálii okamžite spustite svoju národnú linku na zmrazenie medzibankových podvodov:
   • Spojené kráľovstvo: Zavolajte na podvodnú linku svojej banky pomocou horúcej linky 159 Stop Scams (jednoducho vytočte číslo 159), okamžite nahláste Action Fraud (0300 123 2040: vyberte možnosť aktívneho podvodu v reálnom čase, ak sú peniaze momentálne na ceste), a odvolajte sa na Pravidlá povinného preplácania podvodov v súvislosti s aplikáciami regulátora platobných systémov (PSR) (účinné od októbra 2024 pre rýchlejšie platby a CHAPS).
   • Európska únia: Požiadajte o okamžité stiahnutie SEPA kreditného prevodu (camt.056 / pacs.004) pre FRAD (Fraudulent Origin) prostredníctvom vašej banky a okamžite podajte policajné hlásenie, aby národné finančné spravodajské jednotky (FIU) môže vydať núdzové cezhraničné zmrazenie podľa smerníc EÚ proti praniu špinavých peňazí.
   • (cyber.gov.au)**.
5. NEPOSIELAJTE podvodníkovi e-mail, NEPÝTAJTE sa „Dostali ste prevod?“ a NEUPOZORŇUJTE napadnuté vlákno e-mailu: V momente, keď si podvodník uvedomí, že ste odhalili podvod, okamžite sa prihlási na bankový účet príjemcu peňazí a zlikviduje akýkoľvek zostávajúci zostatok prostredníctvom okamžitých krypto-koľajníc alebo medzinárodných drôtov. Udržujte podvodníka úplne v tme, kým vaša banka a FBI zmrazia cieľový účet.
6. Zachovajte napadnuté hlavičky e-mailov (EML / MSG súbory) a izolujte narušenú poštovú schránku: Neodstraňujte podvodné e-maily s faktúrami. Nechajte svoj IT tím exportovať nespracované hlavičky správ (Authentication-Results, Received: from, Reply-To) a skontrolujte vo svojom vlastnom e-mailovom systéme aj v e-mailovom systéme vášho dodávateľa skryté pravidlá preposielania doručenej pošty (pozrite si našu príručku na napadnutý e-mailový účet: skryté pravidlá preposielania a obnovenie).

Rozhodovací strom: vykonanie núdzového odvolania bankového prevodu platobnou železnicou¶

Použite tento rýchly prevádzkový vývojový diagram na vykonanie presného protokolu stiahnutia pre vašu špecifickú platobnú sieť (Fedwire, ACH, SWIFT, alebo CHAPS/Faster Payments):

flowchart TD
    A["Zistený podvodný prevod alebo elektronický prevod"] --> B["Identifikujte presnú platobnú koľajnicu a okamžite získajte sledovacie číslo"]
    B --> C{"Ktorá platobná koľajnica bola použitá?"}
    C -->|"US Domestic Wire (Fedwire)"| D["Získajte 22-znakové sledovacie číslo IMAD / OMAD z pôvodnej banky"]
    C -->|"International Wire (SWIFT)"| E["Získajte 36-znakovú kópiu SWIFT UETR & MT103 z pôvodnej banky"]
    C -->|"Vnútroštátny prevod ACH v USA"| F["Získajte 15-miestne číslo sledovania ACH z pôvodnej banky"]
    C -->|"Rýchlejšie platby v Spojenom kráľovstve / CHAPS alebo EU SEPA"| G["Získajte rýchlejšie platby FPID / CHAPS Ref alebo SEPA End-to-End ID"]
    D --> H["1. Pôvodná banka odošle núdzové odvolanie z dôvodu podvodu + zadržanie neškodného odškodnenia prijímajúcej banke"]
    E --> H
    F --> I{"Koľko pracovných dní od vyrovnania ACH?"}
    I -->|"Vo fronte / Ten istý deň"| J["Zrušenie nedávkovaného ACH alebo okamžité vydanie NACHA ODFI Návrat/Stiahnutie"]
    I -->|"1 až 5 pracovných dní"| K["Vyžiadajte si ODFI Poslať ACH stiahnutie + list o odškodnení na RDFI Fraud Desk"]
    G --> L["Vytočte číslo 159 (Spojené kráľovstvo) / Linka bankového podvodu: Spustite okamžité zmrazenie medzibankového trhu a žiadosť o preplatenie PSR APP"]
    H --> M["2. Obeť zavolá priamo na oddelenie bankových podvodov s číslom IMAD/UETR a číslom účtu príjemcu"]
    K --> M
    M --> N["3. Podajte FBI IC3 (ic3.gov) do 72 hodín, aby ste aktivovali FBI RAT / Financial Fraud Kill Chain + hlásenie miestnej polície"]

Fáza 1: Kritické technické identifikátory, ktoré musíte získať od svojej banky počas prvých 15 minút¶

Keď zavoláte svojej banke, prijímajúcej banke a FBI alebo polícii, že poviete "Dnes ráno sme poslali 142 000 $ do Bank of America", nestačí na nájdenie transakcie v zúčtovacom systéme, ktorý spracováva milióny správ za hodinu. Okamžite musíte požiadať svoju pôvodnú banku o presné kryptografické/zúčtovacie sledovacie číslo pre použitú platobnú koľajnicu:

Why Intermediary / Correspondent Banks Are Your Best Friend in an International Wire Recall¶

If the scammer tricked you into wiring USD or EUR to an offshore bank in Hong Kong, China, Singapore, Dubai, or Eastern Europe, an international SWIFT wire rarely teleports directly from your local US or European bank to the foreign bank in 5 seconds.

Instead, international wires travel through a chain of Correspondent (Intermediary) Banks (such as JPMorgan Chase New York, Citibank N.A., Bank of New York Mellon, Deutsche Bank Frankfurt, or Standard Chartered) and must pass through Time-Zone Cutoffs and Automated Sanctions / AML Screening Filters. Because Asia-Pacific and European banking hours do not overlap with North American afternoon hours, an international wire sent at 14:00 New York time often sits inside a New York Correspondent Bank queue or sits uncredited inside the foreign receiving bank's morning incoming validation queue for 8 to 24 hours.

• Action to Take Immediately: Ask your bank to check the SWIFT gpi Tracker using your 36-character UETR. The SWIFT gpi Tracker shows in real time which exact Intermediary Bank is currently holding the funds (In Transit at Intermediary vs. Credited to Beneficiary).
• If the wire is still sitting at an Intermediary Correspondent Bank in New York, London, or Frankfurt, your bank can send a priority SWIFT MT192 / camt.056 Stop/Recall directly to that Intermediary Bank (and you can alert the Intermediary Bank's New York/London wire room with the UETR), halting the money before it ever leaves domestic jurisdiction.

Phase 2: Activating the FBI Financial Fraud Kill Chain (FFKC) and law enforcement holds¶

When you are dealing with wire fraud over $10,000 (and especially $50,000+ corporate or real estate closing wires), your bank's retail fraud department is only half of the equation. Law enforcement agencies possess statutory powers to trigger emergency freezes at receiving banks and cryptocurrency ramps even before a formal court warrant is signed.

1. United States: How the FBI Recovery Asset Team (RAT) and FFKC Work¶

Established in 2018 inside the FBI's Internet Crime Complaint Center (IC3), the Recovery Asset Team (RAT) streamlines communication between FBI field offices, domestic financial institutions, and the Financial Crimes Enforcement Network (FinCEN) under the Financial Fraud Kill Chain (FFKC) protocol.

To maximize the speed of an FFKC recall, file your report at ic3.gov immediately (do not wait until tomorrow morning to consult a lawyer first, file the ic3.gov form within the first hour of discovering the theft) and include every single field below with zero typos:

1. Victim Information: Your legal name, company name, telephone number (use a direct cell phone number that you will answer 24/7 on the first ring), and an uncompromised email address.
2. Originating Bank Details: Full bank name, branch address, your originating account number, ABA routing number, and the name/phone number of the bank fraud officer you spoke with.
3. Primary Beneficiary (Scammer) Bank Details: Full name of the receiving bank, receiving bank city/state/country, ABA Routing Number / SWIFT BIC, the Beneficiary Account Number, and the exact Beneficiary Name written on the fraudulent wire instructions.
4. Intermediary / Correspondent Bank Details (if applicable): Any intermediary bank name, SWIFT BIC, or routing number listed on the wire sheet.
5. Transaction Metadata: Exact dollar amount down to the cent, exact timestamp and date the wire was executed, and the 22-character Fedwire IMAD/OMAD number or 36-character SWIFT UETR.
6. Follow-Up Phone Call After Submitting ic3.gov:
   • Save/print the PDF copy of your submitted ic3.gov complaint immediately.
   • Call your local FBI Field Office (fbi.gov/contact-us/field-offices) and your local United States Secret Service (USSS) Field Office (secretservice.gov/contact/field-offices, the Secret Service Cyber Fraud Task Forces co-lead BEC wire recalls alongside the FBI).
   • Tell the duty agent on the phone: "We just submitted an emergency IC3 complaint for an active Business Email Compromise wire transfer of [$Amount] sent [X] hours ago. We have the Fedwire IMAD / SWIFT UETR number in hand and request urgent coordination with the IC3 Recovery Asset Team for a Financial Fraud Kill Chain recall."

2. United Kingdom: The 159 Hotline and the October 2024 PSR Mandatory APP Fraud Reimbursement Rules¶

If you or your micro-enterprise/charity in the United Kingdom were tricked into sending a bank transfer (known in UK banking law as Authorised Push Payment (APP) Fraud, where a scammer tricks you into authorizing a Faster Payment or CHAPS wire via a fake invoice, conveyancing solicitor impersonation, or bank impersonation scam):

1. Dial 159 Immediately: Connects you directly to your UK bank's fraud prevention desk to initiate an urgent Faster Payments / CHAPS interbank freeze request to the receiving bank.
2. Invoke Your Statutory Right to Mandatory Reimbursement Under Payment Systems Regulator (PSR) Policy PS23/4 & PS24/3:
   • Under the landmark UK Payment Systems Regulator rules that took legal effect on 7 October 2024, UK payment service providers (PSPs) are legally required to reimburse victims of eligible Authorised Push Payment (APP) scams sent over Faster Payments or CHAPS up to £85,000 within 5 business days (or up to 35 business days if the bank invokes the "stop the clock" investigation provision), unless the bank can prove the consumer acted with "gross negligence" (a very high legal bar under the Consumer Standard of Caution) or was complicit in the fraud.
   • Even if the stolen fundsexceed £85,000 (for example, a £250,000 house deposit conveyancing scam), you can claim the first £85,000 under the mandatory PSR scheme AND pursue the remainder up to £430,000 by escalating a complaint to the Financial Ombudsman Service (FOS, financial-ombudsman.org.uk) if the sending or receiving bank failed its anti-fraud monitoring duties or under the Contingent Reimbursement Model (CRM) legacy principles.

Phase 3: Specific action plans by wire fraud scenario¶

How the fraud happened determines who else must be notified immediately to stop secondary thefts and establish legal liability.

Scenario A: Real Estate Closing / Title & Escrow Wire Hijack (Homebuyer Down Payment Stolen)¶

Real estate closing wire fraud is one of the highest-dollar crimes affecting families. Attackers compromise the email account of a Real Estate Agent, Mortgage Broker, Title Company, or Closing Attorney months in advance, silently monitor the calendar for your closing date, and email you 24 to 48 hours before closing with a realistic PDF attachment: "URGENT: Updated Wire Instructions for [Title Company Name] due to our end-of-month escrow account audit."

If you just wired your home down payment or closing cash to a scammer: 1. Execute Steps 1, 2, and 3 from "Do this now" immediately: Get the IMAD/OMAD from your bank, demand an immediate Hold Harmless Recall, call the receiving bank's fraud desk directly, and file at ic3.gov within the first 30 minutes. 2. Call the Real Title Company / Closing Attorney by Phone Immediately: - Tell the Title Company's escrow officer and general counsel that your closing wire was diverted via a spoofed or compromised email. - Ask them to preserve all email server logs on their end, specifically checking whether the attacker logged directly into the Title Company's Microsoft 365 / Google Workspace account or the Realtor's email account. (Under US state negligence laws and Uniform Commercial Code comparative fault doctrines, determining whose email system was breached without adequate MFA is critical if the wire is not 100 percent recovered by the banks). - Ask the Title Company whether they carry Cyber Crime / Social Engineering / Wire Fraud Endorsement Coverage or affiliation with a title underwriter (such as Fidelity National Title, First American, Old Republic, or Stewart Title), many of which maintain their own dedicated 24/7 Rapid Wire Recovery Coalitions with direct executive contacts at major banks. 3. Notify the Seller and Real Estate Agents in Writing: If your closing funds are frozen in an active FBI/interbank recall investigation, have a real estate attorney immediately send a notice requesting a brief Contract Closing Date Extension / Force Majeure Cure Addendum so you do not automatically forfeit your earnest money deposit while the recall completes within the 5-to-14-day interbank window.

Scenario B: Corporate Vendor Invoice Fraud (B2B Accounts Payable Diversion)¶

In a B2B Vendor Invoice scam, your Accounts Payable (AP) department receives an email from a real, longstanding supplier (billing@supplier.com or a lookalike domain billing@suppIier.com) stating: "Please note we have switched our commercial operating account from Wells Fargo to Truist Bank; please update our ACH/Wire instructions for Invoice #90412."

If your business just paid a real invoice into a fraudulent bank account: 1. Execute the Bank Hold Harmless Recall and FBI ic3.gov filing immediately. 2. Determine Whose Email Server Was Actually Breached (Yours vs. Your Vendor's): - Have your IT Security team inspect the raw EML message headers of the fraudulent email: - Sign that the Vendor's Real Email Was Hacked (True Vendor Compromise): The email passed SPF: PASS, DKIM: PASS, a DMARC: PASS for the vendor's genuine domain (@supplier.com), and came from Microsoft/Google's real mail servers. This means the attacker is currently sitting inside your vendor's real email inbox. Call your vendor's CFO and IT Director on the telephone immediately, because that same attacker is currently sending fake wire instructions to every other customer in your vendor's inbox. - Sign of a Lookalike Domain / Display Name Spoof: The email came from @supp1ier.com alebo @supplier-payments.com (check whois creation date, usually registered within the last 14 days). This means either your own employee's mailbox was breached (allowing the hacker to read the original invoice PDF and create a matching lookalike domain) OR the vendor's mailbox was breached and the hacker set up a lookalike Reply-To domain so the vendor wouldn't see the replies in their Sent folder. 3. Put Your Cyber Insurance & Crime Insurance Carrier on Immediate Notice: - Most commercial Cyber Liability Insurance policies and Commercial Crime / Fidelity Bond policies include a Social Engineering Fraud / Funds Transfer Fraud / Invoice Manipulation coverage endorsement, AND they include 24/7 Incident Response Forensics & Legal Breach Coach hotlines at zero out-of-pocket cost beyond your deductible. - Warning on Insurance Notice Deadlines: Many cyber insurance policies require notification within 24 to 72 hours of discovering a fraudulent wire transfer. Call the 24/7 claims hotline on your policy declaration page today.

Scenario C: CEO / Executive Impersonation ("Urgent Confidential Acquisition / Gift Card / Payroll Change")¶

If an employee was tricked via email, SMS text, WhatsApp, or a Deepfake AI Voice/Video Call impersonating the CEO or Managing Partner into wiring money to an external account, or if Payroll was tricked into changing an executive's Direct Deposit (ACH) routing number: 1. For Payroll Direct Deposit Diversion: Contact your Payroll Processor (ADP, Gusto, Paychex, Workday, Rippling, UKG) within minutes and demand an Immediate NACHA ACH Recall / Reversal and Fraud Freeze on the receiving pre-paid card or bank routing number (often Green Dot, Chime, Sutton Bank, Bancorp, or Pathward). Payroll processors have dedicated bulk fraud reversal desks with direct relationships at neo-bank issuing banks.

Phase 4: How to tell if your own network is still infected and prevent a second wire theft¶

Attackers who successfully pull off a $100,000+ wire fraud against an organization almost always try a second time within 7 to 14 days, either targeting another open vendor invoice they already downloaded from your accounting inbox, or emailing your customers to divert incoming Accounts Receivable payments away from your company.

Complete This 5-Point Forensic Audit Before Authorizing Any Further Payments¶

1. Audit Every Accounting, Finance, Executive, and Legal Mailbox for Hidden Rules & OAuth Apps:
   • Follow our guide on napadnutý e-mailový účet: skryté pravidlá preposielania a obnovenie to run Get-InboxRule -IncludeHidden across every mailbox in your organization, revoke unfamiliar OAuth apps, and check tenant-level Exchange mail transport rules.
2. Audit Entra ID / Google Workspace Sign-In Logs (Impossible Travel a Evilginx AitM Proxy IPs):
   • Check sign-in logs for the last 60 days for connections from commercial VPNs, hosting provider ASNs (DigitalOcean, Linode, Stark Industries, M247, Choopa/Vultr, OVH), or unfamiliar cities. If a user was compromised despite having MFA enabled, they clicked an Adversary-in-the-Middle (AitM) phishing link (Evilginx / Tycoon 2FA). Revoke all refresh tokens (Revoke-MgUserSignInSession) and upgrade Finance/Executive staff to FIDO2 Hardware Security Keys.
3. Check whether Your Domain Name was Impersonated via a Lookalike Domain:
   • Check dnstwist (dnstwister.report) for your company's domain name. If an attacker registered a visual lookalike domain (such as replacing a lowercase l with an uppercase I, or replacing m with rn, or adding -billing.com), immediately submit an emergency Domain Registrar Abuse Takedown Notice to the lookalike domain's registrar and hosting provider (include the EML headers showing the domain is being used for active wire fraud, registrars suspend active BEC phishing domains within hours when provided with headers).
4. Enforce the Golden Rule of Wire & ACH Security (Out-of-Band Dual Verification):
   • Never verify new or changed wire/ACH instructions by calling a phone number printed inside the email or on the attached PDF invoice. The scammer puts their own Google Voice / burner phone number on the fake PDF invoice so that when you call to "verify", the scammer answers the phone and confirms the fake routing number.
   • Mandatory Policy: Every wire transfer, new vendor setup, or change to existing vendor/payroll banking details over $1,000 must be verified by calling a known-good, historical telephone number retrieved from your original offline vendor master contract or an independent public directory, AND require Dual Control Approval (one employee initiates the wire in the bank portal; a second independent officer verifies out-of-band and releases the wire token).
5. Povoliť Positive Pay (pre šeky a ACH) a služby overovania účtu:
   • Zapnite ACH Positive Pay / Debit Blocks na všetkých komerčných prevádzkových účtoch, aby žiadna externá strana nemohla stiahnuť neoprávnené debety ACH.
   • Pri odosielaní platieb v Spojenom kráľovstve (Confirmation of Payee / CoP), EÚ (IBAN-Name Check nariadené podľa nariadenia EÚ o okamžitých platbách) alebo USA (Early Warning Services / Nacha Account Validation), verify that the account holder name returned by the clearing network matches the intended company name before releasing funds.

Často kladené otázky¶

Zdroje skontrolované¶

• Federal Bureau of Investigation (FBI, United States): Internet Crime Complaint Center (IC3) Recovery Asset Team (RAT), Financial Fraud Kill Chain (FFKC) Protocol, and Business Email Compromise Public Service Announcements (ic3.gov).
• Financial Crimes Enforcement Network (FinCEN, United States Department of the Treasury): Advisory on Imposter Scams and Money Mule Schemes / Rapid Response Program (RRP) for Cross-Border Wire Recalls (fincen.gov).
• Cybersecurity and Infrastructure Security Agency (CISA) & United States Secret Service (United States): Protecting Against Business Email Compromise and Real Estate Wire Fraud (cisa.gov, secretservice.gov).
• Payment Systems Regulator (PSR) & Financial Conduct Authority (FCA, United Kingdom): Policy Statement PS23/4 & PS24/3: Fighting Authorised Push Payment (APP) Scams: Mandatory Reimbursement Requirement for Faster Payments and CHAPS (Effective October 7, 2024) (psr.org.uk).
• European Payments Council (EPC, European Union): SEPA Credit Transfer (SCT) and SEPA Instant Credit Transfer (SCT Inst) Rulebooks: Recall for Fraudulent Origin (FRAD / camt.056) (europeanpaymentscouncil.eu).
• Uniform Law Commission / American Law Institute (United States): Uniform Commercial Code (UCC) Article 4A: Funds Transfers (§ 4A-207 Misdescription of Beneficiary; § 4A-211 Cancellation and Amendment of Payment Order) (uniformlaws.org).

Súvisiaci sprievodcovia¶

• Napadnutý e-mailový účet: skryté pravidlá preposielania a obnovenie
• Bank account breach
• Deepfake voice clone and AI impersonation scams
• Phishing a napadnuté účty
• Cryptocurrency wallet drain and seed phrase compromise
• Podvody a podvody