Business Email Compromise & Payment Diversion
When an invoice was intercepted and a payment went to the wrong account — for the company that paid, or the one that never got paid.
This is probably you if
- A supplier's bank details changed by email and the payment vanished.
- A client insists they paid you; the money never arrived.
- An executive urgently requested a transfer that was not genuine.
- You need to know, quickly, whose mailbox was actually compromised.
Free assessment
Twenty minutes with a lawyer. No obligation, and no charge if we conclude there is nothing worth pursuing.
Start hereWhat the work involves
01
The first 48 hours
Recall requests, notice to both banks, and preservation instructions. This window is where most of the recoverable money is either saved or lost.
02
Establishing where the breach occurred
Whose systems were compromised determines who bears the loss. We work with forensic examiners to establish this on evidence rather than assumption.
03
Allocating the loss
We advise on liability between payer, payee, and banks, and pursue or defend the resulting claim.
04
Notification obligations
A compromise of a business mailbox is frequently also a personal data breach. We assess what has to be reported, to whom, and by when.
Being straight with you
These cases turn on contemporaneous records — mail logs, headers, and payment instructions. If they are overwritten before anyone thinks to preserve them, the case gets much harder.
Related practice areas
Online Fraud & Scam Recovery
Tracing where your money went, identifying who holds it, and using civil and regulatory routes to try to get it back.
Investment & Crypto Fraud
Fake trading platforms, long-con relationship investment schemes, rug pulls, and the bogus recovery services that target victims a second time.
Data Breach Response
Legally-led incident response: containment advice, regulator notification, and defending what follows.
Time is the variable you control.
In fraud matters funds move within days, and in breach matters notification clocks start the moment you become aware. Running a trace takes about two minutes and costs nothing.