An email from a supplier — often from their real, compromised mailbox — says their bank details have changed. Email authentication may pass, so the message looks completely legitimate.
The supplier's real mailbox was compromised. Domain clean, authentication passing — and still fraud.
In 2023 attackers got into a small Indiana business’s mailbox and used it to email another local business, redirecting about USD 182k (DOJ, Southern District of Indiana).
In Painted Sky you’re born at random somewhere on Earth and live a whole life — and this scam is one of the fakes that can find you. Make the call yourself, then replay the same life with a lens that shows what was fake.
Play Painted Sky — free →