Payment fraud: Steps to take if your business gets scammed

Issue 2 2022 Security Services & Risk Management

Payment fraud is a nightmare scenario for any business. Irrespective of size, companies face substantial financial and reputational harm resulting from fraudulent activity. Depending on the severity of the crime and the losses incurred, the very survival of the business may be at stake.

Ryan Mer.

Ryan Mer, CEO at eftsure Africa, a Know Your Payee (KYP) platform provider, says banking and payment fraud remains a serious concern as fraudsters use increasingly sophisticated methods to exploit process vulnerabilities and take advantage of human error.

A 2021 TransUnion report noted a significant surge in fraud and criminal activity related to financial services in South Africa, with fraud in this sector surging over 187% in the last year. An Accenture report from the previous year confirms South Africa had the third most cybercrime victims globally, resulting in losses topping R2,2 billion.

“The risk of payment fraud is not limited to any one sector or industry. Any business that makes use of Internet banking or EFT facilities is vulnerable. Fake invoices, business email compromise (BEC) and even insider scams have become worryingly commonplace,” says Mer.

What to do when the worst happens

Payment fraud happens most frequently when companies are paying invoices or doing payment runs. Mer says it’s important to remember banks require only the account number and branch code to process an EFT payment. This means the onus of making sure all payment details are correct and haven’t been altered or manipulated, is on the payer.

When payment fraud is discovered it’s vital to act quickly and methodically:

• Contact the bank immediately to freeze payments and/or accounts to prevent further monies from being stolen.

• Gather as much paperwork and bookkeeping relating to the theft as possible.

• In the event of internal fraud, ensure any laptops, tablets and mobile phones of employees are recovered and safely stored.

• Open a police docket as soon as possible.

• Contact the Southern African Fraud Prevention Service (SAFPS).

Prevention is better than cure

While there is a small possibility stolen money can be recovered, it is mostly not the case as the stolen funds are withdrawn very quickly. In any event, Mer says the process is likely to be time-consuming and costly. “Strict banking terms and conditions place responsibility on the account holder making EFT payments to ensure the accuracy and integrity of payee details. An additional challenge is the unfortunate reality of the South African Police Service (SAPS) being understaffed and under-resourced to deal with crimes of this nature.

“Creating a fraud prevention ecosystem is the most effective way to mitigate risk and stop payment scams in their tracks. Even the best ERP systems cannot protect you from a malicious employee while a platform like eftsure can help limit the risks of internal fraud and BEC attacks by quickly and easily cross-referencing the payments an organisation makes with verified bank account details, before every payment is released.

“Given the potential losses and the onerous process with no guarantees of recovering stolen funds, real-time prevention at the point of compromise just makes good business sense,” says Mer.

Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Three new portable power stations to ease load shedding
News Security Services & Risk Management Products
EcoFlow has launched three portable power stations that provide sufficient power for consumers wherever they are; the DELTA 2 and RIVER 2 Series are feature-filled power solutions to the volatile electricity supply.

You cannot bribe a computer
Access Control & Identity Management Security Services & Risk Management
Corruption is a cancer that destroys the prospects and stability of countries and businesses. It widens wealth gaps and punishes the poor. It costs countries many billions in lost revenue.

How much protection does cyber insurance really give businesses?
Cyber Security Security Services & Risk Management
If organisations don’t meet even the minimum requirements of security and data protection, insurance will do them little good. Instead, it needs to be just one part of the digital resiliency toolbox.

Off-grid power solution for residential estate
Editor's Choice Security Services & Risk Management Residential Estate (Industry) Products
Coral Beach Estate, an upmarket residential estate based in East London, has been struggling with load shedding and power outages due to South Africa's energy crisis, as well as the vandalism of its power infrastructure.

SafeCity Guarding rolls out across 14 suburbs in Johannesburg
News Security Services & Risk Management
In a major drive to provide communities across Johannesburg with additional safety, Vumacam, in partnership with Fidelity ADT and other security providers across the region, rolled out the innovative SafeCity Guarding initiative in 14 suburbs.

FleetDomain underpins Afrirent’s value proposition
Logistics (Industry) Security Services & Risk Management
Afrirent, a 100% female black-owned fleet management company, has been relying on FleetDomain software for a number of years to help it deliver outstanding service to a growing number of clients.

Choosing an inferior lithium battery can be detrimental and unsafe
Uniross Batteries Security Services & Risk Management Products
South Africans looking to mitigate the impact of load shedding by installing a solar system for their home must do so through an accredited installer or electrician to avoid insurance claims being rejected.

Employee screening, a hiring necessity or an invasion of privacy?
Security Services & Risk Management
There is a fine line between checking a potential employee’s qualifications and references, and investigating aspects of their lives that have nothing to do with their job application.

Keeping students, staff and communities safe
Vumacam News CCTV, Surveillance & Remote Monitoring Security Services & Risk Management
South African schools are facing increasing security challenges, making effective surveillance systems more important than ever. To address this issue, Vumacam is offering advanced security solutions with security partners, aimed at keeping students, staff, and the community safe.

Technology is key to securing physical and cybersecurity
Education (Industry) Security Services & Risk Management
The interpretation of security in educational institutions depends on whom you are talking to and whether their focus is on the physical security of the institution, its assets and its people, or its information and communication technology perspective.