Situation
A company receives what appears to be a routine email from a regular supplier announcing new bank details. The payment is made; the supplier never receives it.
What we do
- Immediate recall request through the paying bank
- Preservation of email logs and headers
- Breach assessment under GDPR and, where applicable, NIS2
- Allocation of the loss between the parties under the contract
What the analysis can show
How the email was altered or spoofed, which account received the payment and when the recall was requested.
Limits
A recall depends on the receiving bank and on whether funds are still in the account. Speed matters more than any other factor.
Possible routes
Payment recall; criminal complaint; notification obligations; negotiation with the supplier or insurer.
Illustrative scenarios. Any resemblance to real persons or cases is coincidental. Outcomes depend on the facts of each case and on the procedures available.