惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

V
V2EX
IT之家
IT之家
博客园 - 叶小钗
雷峰网
雷峰网
T
Tailwind CSS Blog
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
S
SegmentFault 最新的问题
Apple Machine Learning Research
Apple Machine Learning Research
爱范儿
爱范儿
博客园 - 【当耐特】
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
大猫的无限游戏
大猫的无限游戏
Last Week in AI
Last Week in AI
月光博客
月光博客
酷 壳 – CoolShell
酷 壳 – CoolShell
Jina AI
Jina AI
博客园 - Franky
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
宝玉的分享
宝玉的分享
阮一峰的网络日志
阮一峰的网络日志
Hugging Face - Blog
Hugging Face - Blog
博客园 - 司徒正美

www.infosecurity-magazine.com

Just Three Ransomware Gangs Accounted for 40% of Attacks Last Month Google Chrome Rolls Out Protection Against Infostealers Targeting Session Cookies STX RAT Targets Finance Sector With Advanced Stealth Tactics Bitcoin Depot Reports $3.6m Crypto Theft After System Breach Atomic Stealer MacOS ClickFix Attack Bypasses Apple Security Warnings Middle East Hack-for-Hire Operation Traced to South Asian Cyber Espionage Group Governance Gaps Emerge as AI Agents Drive 76% Increase in NHIs Google Warns of New Threat Group Targeting BPOs and Helpdesks Google API Keys Quietly Gain Access to Gemini on Android Devices Critical Vulnerability in Ninja Forms Exposes WordPress Sites Anthropic Launches Project Glasswing to Use AI to Find and Fix Critical Software Vulnerabilities US Thwarts DNS Hijacking Network Controlled by Russian APT28 Hackers Claude Discovers Apache ActiveMQ Bug Hidden for 13 Years Iran‑Backed Threat Actors Hit US CNI Providers via Internet‑Facing OT Assets Russian APT28 Hackers Hijack Routers to Steal Credentials, UK Security Agency Warns GPU Rowhammer Attack Enables Privilege Escalation and Full System Compromise GrafanaGhost Exploit Bypasses AI Guardrails for Silent Data Exfiltration Over $17bn Lost to Cyber Fraud in the Last Year, Warns FBI Storm-1175 Exploits Flaws in High-Velocity Medusa Attacks Fortinet Releases Emergency Patch After FortiClient EMS Bug Is Exploited New Phishing Platform Used in Credential Theft Campaigns Against C-Suite Execs New 'Storm' Infostealer Remotely Decrypts Stolen Credentials NCSC Issues Security Alert Over Hackers Targeting WhatsApp and Signal Accounts Apple Expands iOS 18 Security Updates Amid DarkSword Threat Researchers Observe Sub-One-Hour Ransomware Attacks GitHub Used as Covert Channel in Multi-Stage Malware Campaign Most CNI Firms Face Up to £5m in Downtime from OT Attacks Google Introduces Android Dev Verification Amid Openness Debate New Venom Stealer MaaS Platform Automates Continuous Data Theft Chinese Hackers Target European Governments in Espionage Campaigns
Invoice Fraud Costs UK Construction Sector Millions, NCA ...
Phil Muncaster · 2026-03-26 · via www.infosecurity-magazine.com

The UK’s National Crime Agency (NCA) has teamed up with the National Federation of Builders (NFB) to warn the construction sector of the growing risks of invoice fraud.

The awareness campaign is aimed at accounts payable and finance personnel in the sector, as these are the individuals most commonly targeted by fake invoices.

The NCA cited figures from Report Fraud revealing that these scams cost victims almost £4m ($5.3m) in September 2025 alone, with 83 cases reported. Separate analysis from the fraud reporting center claimed that construction and manufacturing accounted for a quarter of invoice fraud in 2024/25 – more than any other sectors.

The NCA said that construction is particularly exposed to these scams because of the complex web of contractors, sub-contractors, consultants and other suppliers that work in the sector. Frequent high-value payments are usually invoiced via relatively insecure email channels.

Read more on invoice fraud: National Crime Agency and NatWest Issue Joint Warning Over Invoice Fraud Threat

Invoice fraud is a type of business email compromise (BEC) whereby fraudsters impersonate suppliers, changing their bank details on fake invoices in order to receive payment.

Sometimes the scammers will hijack email accounts in order to gather intelligence on suppliers, what invoices look like and when they are typically issued. They can then maximize their chances of being paid.

Sender domains are sometimes spoofed, or else supplier emails are hacked in order to send the fake invoices.

Nick Sharp, deputy director of fraud at the NCA’s National Economic Crime Centre (NECC), claimed invoice fraud has a huge impact on corporate victims.

“Businesses can be destroyed by a loss of cashflow from a fraudulent payment, and families and livelihoods are at serious risk of collapse if fraudsters are successful. By providing the correct information to those in a position to thwart the fraudsters’ efforts, we can stop the worst examples of invoice fraud in their tracks,” he added.

“That is why the NCA is actively targeting and disrupting the criminal networks behind invoice fraud through investigations and intelligence sharing with international partners. However, prevention remains equally as important as disruptions.”

Three Steps to Stop Invoice Fraud

The awareness campaign urged finance professionals in the construction sector to:

  • Check for changes to invoice details (including bank details), especially if the sender is putting pressure on for a quick payment
  • Verify invoices by calling the genuine supplier before transferring the funds. Emails can be intercepted by fraudsters
  • Never transfer money until the details have been double checked as correct

The NCA also urged construction sector finance staff to look out for changes to supplier email addresses and any unusual language, grammar or spelling. It recommended high-value payments should only be authorized after checking with a colleague first.

IT systems should be secured with best practice password management and multi-factor authentication (MFA) and up-to-date anti-malware.

It’s not just construction that is being targeted by these scams: BEC cost victims nearly $2.8bn in 2024, making it the second-highest grossing cybercrime type, according to the FBI.