Invoice redirection fraud usually replaces a trusted vendor’s bank details with an account controlled by fraudsters. The paper trail sits in AP systems as much as in bank statements.
Export the vendor master-file history showing when bank details changed, who approved the change, and which emails or portals submitted the new account. Pair that with the redirected payment advices and any “updated banking” correspondence.
Contact the real vendor through previously verified channels—not the email that announced the change—to confirm whether they received funds. Their confirmation that the payment never arrived strengthens institutional notices.
If multiple invoices were redirected, chart each payment separately. Patterns across dates and amounts help banks and counsel identify mule accounts and prioritize freeze or disclosure requests.
Disclaimer: This article provides general information only. It is not legal advice and does not guarantee recovery in any matter.