Skip to content
Corechain Audited
Christopher MichaelMichael Fraud Recovery Advocates · Austin

Case study · Business email compromise

A non-profit's grant payment sent to a fake account

A spoofed email from a partner clinic changed the bank details for a grant disbursement. Nearly all of it was returned.

$690,000

Lost

$655,000

Returned

1 hr

Discovery to recall

§ 01The brief

The non-profit's finance director received a request from a partner clinic's 'CFO' to update bank details before the quarterly grant payment. The clinic's real CFO had never sent it.

§ 02What I did

  1. 1.

    Had the non-profit's bank start a recall the hour they found out.

  2. 2.

    Sent both banks an evidence pack with the email headers and the partner clinic's written confirmation.

  3. 3.

    Filed the CCS report and set up a callback rule for any future change to payee details.

§ 03The outcome

The receiving bank returned $655,000. The clinic received its full grant after the board approved covering the shortfall.

The sooner you call, the more can be done.

The first 30-minute review is free. You'll hear back within 1 business hours, with an honest view of what is realistic.