What Is Wire Transfer Fraud and How to Prevent It?

Wire transfer fraud is a federal crime in which someone uses email, phone, or other electronic communications to trick you into sending money to an account criminals control. It works because wire transfers move fast, settle with finality, and sit in a gap in consumer protection law. Credit cards let you dispute a charge. Wire transfers do not. Once the money lands in the fraudulent account, it is usually swept out within hours, and getting it back depends almost entirely on how quickly you act.

Business email compromise, the most common form, cost victims $2.77 billion in 2024 according to the FBI.¹ The scheme is a federal offense under 18 U.S.C. § 1343, carrying up to 20 years in prison, and up to 30 years when a financial institution is affected.² That’s the legal side. The practical side is what happens to you if you send a wire to the wrong account, and that story starts with knowing what the schemes look like.

How the Schemes Work

Business Email Compromise and CEO Fraud

A criminal gains access to a company email account through phishing or malware, then quietly watches communications and waits for a high-value transaction to appear. When the moment arrives, they insert themselves into the thread with altered payment instructions, routing the money to their own account.

A common variation impersonates a senior executive. Someone in finance receives an urgent, confidential email from the “CEO” demanding an immediate wire transfer for a sensitive deal. The request works because it invokes executive authority and secrecy, pressuring the employee to skip normal approval steps.

Invoice Manipulation

The criminal intercepts communications between a business and a vendor, then alters the banking details on a legitimate invoice. The doctored invoice matches the vendor’s formatting so closely that nothing looks off. The vendor usually does not discover the problem until following up on an overdue payment weeks later.

Real Estate Closing Fraud

Property closings are a prime target because they involve large sums, tight deadlines, and multiple parties exchanging instructions by email. The fraudster monitors communications between the buyer and the title company or attorney, then sends spoofed closing instructions with fraudulent wiring details for the down payment. Funds are typically moved internationally within minutes of arrival. If you’re closing on a property, insist that your title company or attorney verify outgoing wire details through a phone call to a known number before sending anything.

Payroll Diversion

The fraudster contacts a company’s HR or payroll department, impersonates an employee, and requests a change to the employee’s direct deposit information. Redirected deposits often go to prepaid card accounts that are difficult to trace. The fraud typically isn’t discovered until the real employee misses a paycheck.

Investment and Romance Scams

These rely on psychological manipulation rather than technical exploits. In investment fraud, the criminal convinces the victim to wire money into a fake trading platform promising unrealistic returns. Romance scams involve building a long-term emotional relationship before fabricating a financial emergency that requires an urgent wire transfer.

Warning Signs

The single biggest red flag is urgency paired with secrecy. Any request that demands you act immediately and tells you not to discuss it with anyone else should stop you cold. Fraudsters manufacture panic specifically to prevent you from taking two minutes to verify the request through a separate channel.

Any unexpected change in payment instructions from an established partner warrants suspicion. If a vendor or attorney you’ve worked with for years suddenly provides new wiring details, call them at a phone number you already have on file. Do not use any number provided in the email containing the new instructions, because the fraudster controls that line.

Look at the sender’s full email address, not just the display name. Criminals register domains that differ by a single character from the legitimate company. A domain like “acme-corp.com” versus the real “acmecorp.com” is all it takes.

A shift in the requested payment method also signals trouble. If a business that normally pays through checks or ACH suddenly demands an international wire, that change is designed to move the funds beyond the easy reach of domestic financial institutions.

Prevention That Actually Works

The single most effective defense is a mandatory out-of-band verification protocol for all wire transfers above a set threshold. Call the recipient at a phone number you already have on file, not one provided in the email requesting the transfer, and confirm the wiring instructions. Two minutes. It defeats the vast majority of these schemes.

For businesses, dual-authorization requirements add another layer. Requiring two people to independently approve any outgoing wire means a single compromised employee cannot unilaterally send funds to a fraudulent account.

Training matters more than most companies admit. The employee who processes the wire needs to understand that urgency and secrecy in a payment request are warning signs, not reasons to skip verification. Simulated phishing exercises keep awareness sharp in ways annual compliance training does not.

On the technical side, multi-factor authentication on all email accounts used for financial communications prevents the initial account compromise that makes business email compromise possible. Email authentication protocols like SPF, DKIM, and DMARC on your company’s domain also make it harder for criminals to send convincing spoofed emails using your name.

Why Wire Transfers Are So Hard to Recover

Wire transfers occupy a gap in consumer protection law that catches most victims by surprise. Credit card transactions, debit card purchases, and ACH transfers all carry federal protections that let you dispute unauthorized charges and get your money back. Wire transfers do not. They are explicitly excluded from the Electronic Fund Transfer Act and Regulation E, which provide the error-resolution and reimbursement rights most people rely on for other electronic payments.

Instead, wire transfers are governed by UCC Article 4A, a body of commercial law designed for large-value interbank transfers between businesses. Article 4A allocates risk through a framework built around “commercially reasonable security procedures” agreed upon between the bank and the customer, not the consumer-friendly dispute process most people expect.³ The practical result: if a criminal tricks you into authorizing a wire transfer, the bank generally has no obligation to reverse it. You authorized the payment, even though the authorization was obtained through fraud.

What to Do in the First Hours

Every minute counts. SWIFT, the global messaging network banks use for international transfers, has found that stolen funds are typically moved out of the receiving account within 72 hours or less.⁴ Sophisticated fraud rings sweep accounts much faster. The window for successful recovery narrows drastically with each passing hour.

Call your bank’s wire transfer or fraud department first, using a verified phone number rather than the branch. Tell them clearly that you need a fraudulent wire transfer recalled. The bank will send a cancellation request through SWIFT using a special fraud indicator code, asking the receiving bank to freeze the funds.⁵ Provide the exact amount, date and time of the transfer, and the full account and routing numbers for the fraudulent receiving account.

Understand that this cancellation is a request. The receiving bank is not legally obligated to freeze the funds; it makes a risk-based decision about whether to quarantine the money pending investigation.⁵ Speed is your strongest argument, because money still sitting in the account is far easier for the receiving bank to justify freezing.

While the bank processes the recall, preserve every piece of evidence. Save the fraudulent email with its full header information, which reveals the actual routing path and helps investigators trace the source. Keep the wire confirmation, any invoices involved, and all related communications. Do not delete or modify anything.

If the fraud involved a compromised business email account, isolate and secure that account immediately. Change all associated passwords and enable multi-factor authentication.

The FBI Financial Fraud Kill Chain

For larger international transfers, a more powerful recovery tool exists. The FBI’s Financial Fraud Kill Chain, operated through the IC3 Recovery Asset Team, coordinates with financial institutions and FBI field offices to freeze fraudulent funds. In 2024, this process achieved a 66% success rate, freezing $561.6 million across more than 3,000 incidents.¹

The Kill Chain can only be activated when all four of the following are true:

The fraudulent wire transfer is $50,000 or more.
The transfer is international.
A SWIFT cancellation request has already been initiated.
The transfer occurred within the last 72 hours.

Transfers that fall below these thresholds should still be reported to IC3, but the Kill Chain process itself will not apply.⁵ For domestic transfers, the IC3 Recovery Asset Team can still work with financial institutions to attempt a hold on the funds, and 2024 data shows that domestic freezes accounted for $469.1 million of the total.¹

FinCEN’s Rapid Response Program, which works alongside the Kill Chain, has documented significantly higher recovery rates when victims or financial institutions report the fraud to law enforcement within the 72-hour window.⁶

Where to Report

After contacting your bank, file a complaint with the IC3 at ic3.gov. This is the FBI’s central intake point for cyber-enabled crime.⁷ The IC3 complaint is not paperwork for the file. The data you submit is what triggers the Recovery Asset Team’s involvement in freezing funds and what analysts use to connect your case to larger criminal networks. Every hour of delay reduces the chances that the recovery process can intercept the money.⁸

File a separate report with the FTC at reportfraud.ftc.gov. The FTC does not resolve individual complaints, but it enters your report into the Consumer Sentinel Network, a database shared with civil and criminal law enforcement agencies worldwide.⁹ Investigators at other agencies use this data to build cases and identify patterns.¹⁰

File a report with your local police. They rarely have resources to investigate international wire fraud, but the report itself is often required for a claim under a commercial crime or cyber insurance policy.

Will Your Bank Cover the Loss?

The question every victim asks is whether the bank will make them whole. Under UCC Article 4A, the answer depends on whether the payment was truly unauthorized and whether the bank followed proper security procedures.

If the bank accepts a payment order that was not authorized by the customer and the order is not “effective” under the security procedure framework, the bank must refund the payment plus interest.¹¹ That sounds straightforward. There’s a catch.

Even if you did not authorize the transfer, it’s treated as “effective” (meaning you bear the loss) when two conditions are met: the bank had a commercially reasonable security procedure in place, and the bank accepted the order in good faith while following that procedure.³ Security procedures can include callback verification, encryption, identifying codes, or similar protections agreed upon between you and the bank.

Whether a security procedure qualifies as commercially reasonable considers the size and frequency of your typical transfers, what alternative procedures the bank offered you, and what similarly situated banks and customers generally use.³ This is where disputes end up in court. If the bank offered you callback verification and you declined it in favor of email-only instructions, you will have a difficult time shifting the loss to the bank.

There’s one more wrinkle. If the bank offered a commercially reasonable security procedure and you chose a less secure option, you are bound by any payment order accepted under the procedure you chose, even if the transfer was unauthorized. The practical takeaway: accept every security measure your bank offers for wire transfers, especially callback verification. Declining those protections shifts liability squarely onto you.

Deducting an Unrecoverable Loss on Your Taxes

If you cannot recover the stolen funds, you may be able to deduct the loss on your federal tax return. Under IRC Section 165, theft losses from transactions entered into for profit are deductible. Wire fraud qualifies as theft for tax purposes, which the IRS and courts define broadly to include swindling, false pretenses, and other forms of criminal appropriation.

To claim the deduction, the loss must meet three conditions: it resulted from conduct that qualifies as theft under your state’s criminal law, you have no reasonable prospect of recovering the funds, and the loss arose from a transaction entered into for profit.¹² That last requirement matters. A business wiring payment to a vendor that turned out to be fraudulent clearly qualifies. A personal romance scam may face more scrutiny on whether it was a transaction entered into for profit.

You report the loss on IRS Form 4684, which you attach to your tax return. If the theft occurred in a prior year and you’re filing an amended return, attach Form 4684 to Form 1040-X with an explanation. You’ll need to provide the name and, if known, the taxpayer identification number and address of the person or entity that defrauded you.¹² If you filed an insurance claim, only the portion not covered by insurance is deductible. Consult a tax professional, as the rules around casualty and theft loss deductions have changed several times in recent years.

1
Internet Crime Complaint Center (IC3). 2024 IC3 Annual Report
2
Office of the Law Revision Counsel. 18 U.S. Code 1343 – Fraud by Wire, Radio, or Television
3
Legal Information Institute (LII) / Cornell Law School. UCC 4A-202 – Authorized and Verified Payment Orders
4
Swift. Recovery of Suspected Fraudulent Transactions
5
Swift. Market Practice Guidelines for the Cancellation of Suspected Fraudulent Transactions
6
Financial Crimes Enforcement Network (FinCEN). Fact Sheet on the Rapid Response Program
7
Internet Crime Complaint Center (IC3). IC3 Home Page
8
Federal Bureau of Investigation. Electronic Tip Form
9
Federal Trade Commission. ReportFraud.ftc.gov
10
Federal Trade Commission. Why Report Fraud?
11
Legal Information Institute (LII) / Cornell Law School. UCC 4A-204 – Refund of Payment and Duty of Customer to Report With Respect to Unauthorized Payment Order
12
IRS. Instructions for Form 4684 – Casualties and Thefts