Business Scams & Fraud Prevention
Spot scams fast to protect your company’s bottom line and reputation.
Business Email Compromise
Business Email Compromise (BEC) is a rising threat that targets both large enterprises and small companies. Attackers spend days - or even weeks - researching your organization to craft convincing messages that appear to come from a known vendor, executive or partner. Once they’ve earned your trust, they spring the trap: urgent wire-transfer requests, last-minute invoice changes or fake “vendor update” notices. A single successful BEC attack can drain thousands (or even millions) from your accounts and damage your reputation in an instant.
Red Flags
- Sender address is off by a letter or uses a look-alike domain (e.g. “finance-vendor.com” vs. “financevendor.com”)
- Unexpected change requests for payment details, routing info or invoice terms
- Emails pressuring you to act immediately or outside normal protocols
- Messages that refer to people or projects no one on your team recognizes
- Attachments or links that prompt you to enable macros or login on a non-company page
How to Protect Yourself
- Always verify any payment or account-change request by calling a known phone number—never by replying to the email
- Require two-factor authentication on every business email and financial platform
- Use email-authentication tools (DMARC, DKIM, SPF) to block spoofed and forged messages
- Keep an approved vendor contact list up to date and restrict who can request changes
- Monitor outbound wires for unusual amounts or destinations and flag anything out of the ordinary
Check Fraud is a Persistent Threat to Your Business
Check fraud is still a common threat, with scammers stealing checks from the mail or unsecured areas, then using chemicals to erase and rewrite them—often for higher amounts or different payees.
Just a few altered checks can cause cash flow issues and take time to fix.
Positive Pay helps stop fraud before it impacts your account. It compares each check presented for payment to your issued- check list and flags anything that doesn’t match. That means fewer surprises—and more peace of mind.
At Horizon Bank, we’re here to help you protect what matters most.
Red Flags
- Check amounts or payees that don’t match your approved records
- Smudged, discolored or unusually wrinkled check paper
- Endorsements from names you don’t recognize
- Checks deposited or cashed at branches or ATMs your company never uses
How to Protect Yourself
- Keep all blank stock and signed checks in a locked safe or cabinet
- Use a locked mailbox or courier service for outgoing payments
- Enroll in your bank’s Positive Pay service to flag mismatches between issued and presented checks
- Require dual sign-off on checks over a set dollar threshold
- Where possible, shift vendors to electronic payments (ACH or wire) for better audit trails
Give Your Account an Extra Layer of Protection with 2-Step Verification
Merchandise Scams
Merchandise Scams lure businesses with “can’t-miss” deals on equipment, supplies or materials - often at steep bulk-order discounts - but require full payment or hefty deposits up front. Once you pay, the vendor vanishes, delivers counterfeit or subpar products, or sends nothing at all. These schemes can drain your cash reserves, leave projects stalled and force you into costly last-minute replacements.
Red Flags
- Prices well below market value or “limited time” bulk discounts that seem too good to be true
- Requests for payment via wire transfer, prepaid cards or cryptocurrency only
- Vendors operating from generic email domains (e.g., @gmail.com) or without a verifiable address
- Poorly designed websites, vague company information or no online reviews
- High-pressure tactics (“order now before stock runs out”)
How to Protect Yourself
- Vet every new supplier - check business registrations, references and third-party reviews
- Use formal purchase orders and contracts that specify delivery dates, quality standards and payment schedules
- Tie deposits or progress payments to verifiable milestones or partial deliveries
- Favor payment methods with built-in protections (corporate cards, escrow services) over full upfront wires
- Order a small sample first to confirm legitimacy before committing to large quantities
Red Flags
- Requests for full payment (or very large deposits) before any work begins
- No formal contract, vague scope of work or refusal to sign detailed agreements
- Invoices with generic line items or lacking clear cost breakdowns
- Providers who avoid site visits, in-person meetings or verifiable references
- Promises of unusually fast turnaround or rock-bottom pricing without a plausible explanation
How to Protect Yourself
- Always insist on a written contract that spells out deliverables, milestones and payment schedules
- Verify licenses, certifications and past performance - speak directly with former clients
- Tie payments to completed milestones instead of paying everything upfront
- Use escrow services or corporate cards (which offer dispute/chargeback protections)
- Conduct basic background and business-registration checks before you sign on the dotted line
Frequently Asked Questions
-
How do I report a suspected business scam?
If you suspect fraud, contact your relationship manager or fraud team immediately. You can also call our 24/7 fraud hotline at 888-873-2640 or submit details through our online fraud-reporting form.
-
What should I do right away if I think I’ve fallen victim to Business Email Compromise?
As soon as you notice suspicious activity:
- Pause any pending payments.
- Alert your IT/security team to lock compromised accounts.
- Verify all recent payment requests directly with known contacts (by phone).
- Report the incident to your bank and law enforcement.
-
Can I get reimbursed for losses from check fraud?
Many banks offer partial or full reimbursement if you’ve enrolled in Positive Pay or similar fraud-detection services - and if you’ve followed recommended security procedures. Check your account agreement or speak with your banker for details.
-
Are electronic payments (ACH, wire) safer than paper checks?
Electronic payments provide better audit trails and often include built-in confirmations, making them harder to tamper with than paper checks. However, they’re not foolproof - ensure you use multi-factor authentication, vendor verification calls, and strict approval workflows.
-
How often should my team receive scam-awareness training?
We recommend at least quarterly training sessions, supplemented by monthly phishing simulations and periodic updates on emerging scam tactics. Keeping everyone sharp is the best defense.
-
What’s the first safeguard I should implement?
First, turn on multi-factor authentication for every critical account and require two separate approvals for any payment or vendor-change request. Next, lock down your email with DMARC, DKIM and SPF. Finally, add Positive Pay to your check workflow so each item is quietly matched against what you issued and anything that doesn’t line up gets flagged before it clears.
