惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

U
Unit 42
罗磊的独立博客
博客园 - 聂微东
T
The Blog of Author Tim Ferriss
博客园 - 司徒正美
Stack Overflow Blog
Stack Overflow Blog
F
Fortinet All Blogs
A
About on SuperTechFans
腾讯CDC
Apple Machine Learning Research
Apple Machine Learning Research
B
Blog RSS Feed
IT之家
IT之家
V
Visual Studio Blog
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
宝玉的分享
宝玉的分享
C
Check Point Blog
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
Vercel News
Vercel News
爱范儿
爱范儿
Microsoft Security Blog
Microsoft Security Blog
月光博客
月光博客
T
Tailwind CSS Blog
The Cloudflare Blog
Hugging Face - Blog
Hugging Face - Blog

www.infosecurity-magazine.com

Just Three Ransomware Gangs Accounted for 40% of Attacks Last Month Google Chrome Rolls Out Protection Against Infostealers Targeting Session Cookies STX RAT Targets Finance Sector With Advanced Stealth Tactics Bitcoin Depot Reports $3.6m Crypto Theft After System Breach Atomic Stealer MacOS ClickFix Attack Bypasses Apple Security Warnings Middle East Hack-for-Hire Operation Traced to South Asian Cyber Espionage Group Governance Gaps Emerge as AI Agents Drive 76% Increase in NHIs Google Warns of New Threat Group Targeting BPOs and Helpdesks Google API Keys Quietly Gain Access to Gemini on Android Devices Critical Vulnerability in Ninja Forms Exposes WordPress Sites Anthropic Launches Project Glasswing to Use AI to Find and Fix Critical Software Vulnerabilities US Thwarts DNS Hijacking Network Controlled by Russian APT28 Hackers Claude Discovers Apache ActiveMQ Bug Hidden for 13 Years Iran‑Backed Threat Actors Hit US CNI Providers via Internet‑Facing OT Assets Russian APT28 Hackers Hijack Routers to Steal Credentials, UK Security Agency Warns GPU Rowhammer Attack Enables Privilege Escalation and Full System Compromise GrafanaGhost Exploit Bypasses AI Guardrails for Silent Data Exfiltration Over $17bn Lost to Cyber Fraud in the Last Year, Warns FBI Storm-1175 Exploits Flaws in High-Velocity Medusa Attacks Fortinet Releases Emergency Patch After FortiClient EMS Bug Is Exploited New Phishing Platform Used in Credential Theft Campaigns Against C-Suite Execs New 'Storm' Infostealer Remotely Decrypts Stolen Credentials NCSC Issues Security Alert Over Hackers Targeting WhatsApp and Signal Accounts Apple Expands iOS 18 Security Updates Amid DarkSword Threat Researchers Observe Sub-One-Hour Ransomware Attacks GitHub Used as Covert Channel in Multi-Stage Malware Campaign Most CNI Firms Face Up to £5m in Downtime from OT Attacks Google Introduces Android Dev Verification Amid Openness Debate New Venom Stealer MaaS Platform Automates Continuous Data Theft Chinese Hackers Target European Governments in Espionage Campaigns
National Crime Agency and NatWest Issue Joint Warning Ove...
2026-01-30 · via www.infosecurity-magazine.com

Photo of Danny  Palmer

NatWest Bank and the UK’s National Crime Agency (NCA) have launched a joint awareness campaign to highlight the risk of invoice fraud, a cybercrime which costs businesses millions a year.

It happens when fraudsters trick individuals or businesses into paying fake invoices or use social engineering to redirect genuine payments into their own accounts.

Invoice and business email compromise (BEC) fraudsters impersonate suppliers, intercept emails or send convincing invoices demanding urgent payments into accounts they control. The aim is to manipulate victims into transferring funds to the fraudsters instead of their legitimate destination.

Often, by the time the victim has realized what has happened, it’s too late and the money is gone.

According to Action Fraud, in September 2025 alone, the 83 reported victims of invoice fraud cost an average of £47,000 ($65,000) each, with the combined total amounting to almost £4m ($5.5m).

"Invoice fraud is one of the highest harm types of fraud experienced by victims and it has a huge impact on those who become a victim. Businesses can be destroyed by a loss of cashflow from a fraudulent payment, families and livelihoods are at serious risk of collapse if fraudsters are successful,” said Nick Sharp, deputy director fraud at the National Economic Crime Centre (NECC) in the NCA.

"By providing the correct information to those in a position to thwart the fraudsters' efforts, we can stop the worst examples of invoice fraud in their tracks.” 

The campaign offers guidance for both individuals and businesses on how to identify invoice fraud. This includes:

  • Check for any changes to invoice details, bank details or if you are being pressed for an urgent payment.
  • Verify by calling the genuine supplier on a previously used phone number before you transfer money, as emails can be intercepted or diverted.
  • Never transfer money until you are satisfied the details are correct.

"Criminals are undertaking increasingly sophisticated methods to commit fraud, often targeting the Accounts Payable and Finance departments of small sole‑traders and multi‑national corporations,” said Avani Patel, head of commercial & institutional fraud at NatWest Group

"This joint campaign with the NCA will equip businesses with the knowledge and tools they need to protect themselves against devastating invoice fraud attacks. We are urging all businesses to adopt a 'Check, Verify, Never' mindset - checking for any changes to payment details, independently verifying those changes with trusted contacts, and never transferring money until fully satisfied,” she added.