Fraud prevention

Fraud prevention by attack type

Deep dives on common AP and vendor-payment attacks—what they are, how Vantirs detects them in QuickBooks Online, and actionable checklists your firm can use with clients.

Browse attack types

Each guide includes detection signals, prevention steps, and links to BEC protection, vendor verification, and invoice fraud detection.

Vendor Impersonation

Vendor impersonation is when a fraudster poses as a legitimate supplier—often via email or forged documents—to trick accounts payable into changing payment details or approving a fraudulent invoice. Attacks may use look-alike domains, cloned letterhead, or urgent language to bypass normal scrutiny.

Read guide →

Duplicate Invoice Fraud

Duplicate invoice fraud occurs when the same expense is submitted twice—intentionally or through sloppy controls—so the organization pays twice for one good or service. Fraudsters may reuse invoice numbers with small tweaks or submit near-copies across different approvers.

Read guide →

Bank Change Fraud

Bank change fraud is the class of schemes where an attacker convinces AP to send future payments to a fraudulent account—often by email claiming an “updated” wire or ACH destination. It is one of the highest-loss vectors for mid-market finance teams.

Read guide →

Ghost Vendor Schemes

A ghost vendor is a fake or shell supplier set up in your books to receive payments with no legitimate good or service behind them. Insiders or external fraudsters create vendors that look plausible on the surface but exist only to extract cash.

Read guide →

Payment Diversion

Payment diversion is any scheme that redirects legitimate outgoing payments to the wrong account—whether through altered invoices, man-in-the-middle messaging, or compromised portals. The business believes it is paying a real supplier while funds go to a criminal.

Read guide →

Email Spoofing

Email spoofing forges or misrepresents sender identity so a message appears to come from a trusted vendor, executive, or domain. Fraudsters use spoofing and look-alike domains to request payments, share fake invoices, or escalate urgency.

Read guide →

Overbilling

Overbilling is the practice of charging more than contractually owed—inflated quantities, padded hours, duplicate line items, or “accidental” extras. It may be criminal or simply opportunistic, but the effect is the same: excess outflow.

Read guide →

Check Fraud

Check fraud includes forged, altered, or stolen checks, as well as deposit fraud where criminals intercept or duplicate paper payments. Even firms moving to ACH still face check exposure for refunds, exceptions, or legacy processes.

Read guide →