Payment fraud: Steps to take if your business gets scammed

Issue 2 2022 Security Services & Risk Management

Payment fraud is a nightmare scenario for any business. Irrespective of size, companies face substantial financial and reputational harm resulting from fraudulent activity. Depending on the severity of the crime and the losses incurred, the very survival of the business may be at stake.

Ryan Mer.

Ryan Mer, CEO at eftsure Africa, a Know Your Payee (KYP) platform provider, says banking and payment fraud remains a serious concern as fraudsters use increasingly sophisticated methods to exploit process vulnerabilities and take advantage of human error.

A 2021 TransUnion report noted a significant surge in fraud and criminal activity related to financial services in South Africa, with fraud in this sector surging over 187% in the last year. An Accenture report from the previous year confirms South Africa had the third most cybercrime victims globally, resulting in losses topping R2,2 billion.

“The risk of payment fraud is not limited to any one sector or industry. Any business that makes use of Internet banking or EFT facilities is vulnerable. Fake invoices, business email compromise (BEC) and even insider scams have become worryingly commonplace,” says Mer.

What to do when the worst happens

Payment fraud happens most frequently when companies are paying invoices or doing payment runs. Mer says it’s important to remember banks require only the account number and branch code to process an EFT payment. This means the onus of making sure all payment details are correct and haven’t been altered or manipulated, is on the payer.

When payment fraud is discovered it’s vital to act quickly and methodically:

• Contact the bank immediately to freeze payments and/or accounts to prevent further monies from being stolen.

• Gather as much paperwork and bookkeeping relating to the theft as possible.

• In the event of internal fraud, ensure any laptops, tablets and mobile phones of employees are recovered and safely stored.

• Open a police docket as soon as possible.

• Contact the Southern African Fraud Prevention Service (SAFPS).

Prevention is better than cure

While there is a small possibility stolen money can be recovered, it is mostly not the case as the stolen funds are withdrawn very quickly. In any event, Mer says the process is likely to be time-consuming and costly. “Strict banking terms and conditions place responsibility on the account holder making EFT payments to ensure the accuracy and integrity of payee details. An additional challenge is the unfortunate reality of the South African Police Service (SAPS) being understaffed and under-resourced to deal with crimes of this nature.

“Creating a fraud prevention ecosystem is the most effective way to mitigate risk and stop payment scams in their tracks. Even the best ERP systems cannot protect you from a malicious employee while a platform like eftsure can help limit the risks of internal fraud and BEC attacks by quickly and easily cross-referencing the payments an organisation makes with verified bank account details, before every payment is released.

“Given the potential losses and the onerous process with no guarantees of recovering stolen funds, real-time prevention at the point of compromise just makes good business sense,” says Mer.

Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Understanding the power of digital identity
Access Control & Identity Management Security Services & Risk Management Financial (Industry)
The way we perceive business flourishing is undergoing a paradigm shift, as digital identity and consumer consent redefine the dynamics of transactions, says Shanaaz Trethewey.

What you can expect from digital identity in 2024
Access Control & Identity Management Security Services & Risk Management
As biometric identity becomes a central tenet in secure access to finance, government, telecommunications, healthcare services and more, 2024 is expected to be a year where biometrics evolve and important regulatory conversations occur.

More than just a criminal record check
iFacts Security Services & Risk Management
When it comes to human-related risks, organisations and their most senior leaders focus on a narrow set of workforce risks, the potential risks that human workers pose to the business.

Tech developments lead hologram growth in 2024
News & Events Security Services & Risk Management
Micro-lenses, micro-mirrors and plasmonics are among the rapidly-emerging optical devices that have evolved on the back of holographic and diffractive technologies, and are seen as part of the natural evolution of optical science by R&D teams.

Are you leaving money on the table?
Editor's Choice Security Services & Risk Management
How many customers have you helped since starting your business? Where does most of your new business come from? If the answer is not from your database’s existing customers, you might have a problem.

The business value of ChatGPT
Security Services & Risk Management Risk Management & Resilience
Transparency, policy and integrity. It is critical for organisations to have a line of sight into processes and procedures that clearly define employee use cases when it comes to ChatGPT, says Lizaan Lewis, Head of the Legal Department at Altron Systems Integration.

BMS for smaller businesses
Security Services & Risk Management Products & Solutions Risk Management & Resilience
Small businesses can also benefit from tailored energy management solutions just like large corporations. Effective energy management is essential for more sustainable and efficient operations.

Kidnapping for ransom
News & Events Security Services & Risk Management Risk Management & Resilience
There has been an 8,6% increase in reported kidnapping cases in South Africa compared to last year, with 3 854 cases reported between April and June this year, leaving ordinary South Africans increasingly vulnerable.

The difference between a SOP and a SOP
Residential Estate (Industry) Integrated Solutions Security Services & Risk Management Risk Management & Resilience
SOPs are a touchy issue that need careful attention and automation to ensure they deliver the desired security results. Beyond design and automation, implementation is the ultimate road to success.

Scoping out potential estates
Alwinco Security Services & Risk Management
When an intruder surveys a residential estate of 200 houses, they see at least 200 cars, 400 cell phones, 400 computers, 200 flat screen TVs, 600 bank cards, and various other items of value.