What Payment Diversion Fraud Is

Payment diversion fraud happens when a scammer tricks you into sending money to the wrong account—one they control—instead of the person or business you intended to pay. The money leaves your account legitimately, but it goes to a criminal rather than your landlord, lender, utility company, or whoever you meant to pay. Once the money lands in the fraudster's account, it is usually moved again within hours and becomes nearly impossible to recover.

This is different from other payment scams because you are not tricked into giving away your own banking credentials or card numbers. Instead, you are misdirected about where to send the payment itself. The fraud happens at the moment you choose the destination—and by the time you realize the mistake, the money is already gone.

Key Takeaways

  • Payment diversion fraud tricks you into sending money to a scammer's account instead of the real business or person you owe, and the money is usually moved or withdrawn within hours.
  • Scammers intercept payment instructions through email spoofing, fake invoices, text messages, or by compromising a business's actual email account.
  • The money you send is your own legitimate transfer, so your bank has limited ability to reverse it once it clears, even though fraud occurred.
  • Verify payment instructions by calling the business directly using a phone number you find yourself—never use contact information from an email or text you received.
  • If you discover the fraud within hours, contact your bank immediately; if days have passed, file a report with the FBI's Internet Crime Complaint Center and your state attorney general.

How Scammers Intercept Payment Instructions

The most common method is email spoofing—a scammer sends you an email that looks like it came from your landlord, mortgage lender, or utility company, but the sender address is fake or nearly identical to the real one. The email contains an invoice or payment notice with instructions to send money to a new account. You follow the instructions and wire the money to what you believe is the legitimate business.

A second method is account compromise. The scammer gains access to the real business's email account—through a data breach, phishing, or weak passwords—and sends payment instructions from the actual business email address. This is harder to spot because the email is genuinely from the company's system.

Text message and phone call versions also exist. A scammer texts you claiming to be your bank or a service provider, directing you to pay an overdue bill or confirm a transaction by sending money to a specific account. Some scammers call directly, posing as a representative from a company you do business with, and pressure you to make an immediate payment.

Why Banks Cannot Always Reverse the Money

When you send money through ACH transfer, wire transfer, or bill pay, you are authorizing the transaction yourself. Your bank processed your legitimate instruction to move your own money to the account you specified. From the bank's perspective, the transaction worked exactly as you requested.

This is why recovery is difficult. If you had given your password to a criminal and they drained your account, your bank would likely reverse it as unauthorized. But in payment diversion fraud, you authorized the transfer—you just sent it to the wrong place because you were deceived about the destination.

Wire transfers are especially hard to recover because they are designed to be final and irreversible. ACH transfers can sometimes be reversed within a narrow window (usually one or two business days), but only if your bank acts quickly and the receiving bank cooperates. After that window closes, the money is gone from a legal standpoint, even though fraud occurred.

Red Flags That Signal a Misdirected Payment Request

Legitimate businesses rarely change their payment methods or accounts without advance notice through official channels. If you receive an unexpected email or text asking you to send money to a new account, that is a warning sign. Real companies also do not usually ask you to wire money or use gift cards to pay bills.

Watch for small errors in email addresses or domain names. A scammer might use "paypa1.com" instead of "paypal.com" or "amaz0n-billing.com" instead of "amazon.com". These look right at a glance but are fraudulent.

Pressure and urgency are also red flags. Scammers often claim your account will be closed, your service will be cut off, or legal action will follow if you do not pay immediately. Real businesses give you time to respond and do not threaten you into paying.

How to Verify Payment Instructions Before You Send Money

Never use contact information from an email, text, or phone call you received. Instead, find the business's phone number yourself by searching online or looking at a past bill or statement. Call that number and ask whether the payment request is legitimate. This single step stops most payment diversion fraud before it happens.

If you are paying a bill online, log into your account directly through the company's website rather than clicking a link in an email. Go to the official website by typing the address into your browser, not by following a link someone sent you. Once you are logged in, you can see your actual account status and any real payment requests.

For large or unusual payments—especially wire transfers—ask the business to confirm the request through a second method. For example, if you received an email asking you to wire money, call the company and have them verify the account number and amount over the phone before you send anything.

What to Do If You Sent Money to the Wrong Account

Time matters. Contact your bank immediately, even if it is after hours. Tell them you sent money to a fraudulent account and ask them to attempt a recall or reversal. For ACH transfers, your bank may be able to reverse the transaction if they act within one business day. For wire transfers, the window is much narrower—sometimes just hours.

Your bank will file a fraud claim on your behalf, but this does not may provide recovery. The receiving bank may freeze the account if they are notified quickly, but the money is often moved to another account or withdrawn in cash before anyone can stop it.

File a report with the FBI's Internet Crime Complaint Center (IC3) at ic3.gov. This creates an official record and helps law enforcement track payment diversion schemes. Also file a complaint with your state's attorney general office. These reports do not recover your money directly, but they document the fraud and may help authorities pursue the scammer.

How to Protect Yourself Going Forward

Set up account alerts with your bank so you are notified of large transfers or unusual activity. Many banks allow you to set a daily transfer limit, which can slow down a scammer even if they gain access to your account.

Use multi-factor authentication on your email and any online banking or bill-pay accounts. This makes it harder for scammers to compromise your accounts and send fraudulent payment instructions from your own email address.

Be skeptical of any unexpected payment request, especially one that asks you to use wire transfer, ACH, or gift cards. Legitimate businesses accept credit cards, checks, and standard online bill pay. If a payment method seems unusual, verify it by calling the business directly.

Review your bank and credit card statements regularly. Catching unauthorized activity early gives you the best chance of recovery, even though payment diversion fraud is harder to reverse than other types of fraud.

Frequently Asked Questions

Can I get my money back if I sent it to a scammer's account?

It depends on how quickly you act. If you contact your bank within hours of the transfer, they may be able to reverse an ACH transfer or freeze a wire. After one or two business days, reversal becomes unlikely because the money has usually been moved or withdrawn. File a report with the FBI's IC3 and your state attorney general, but recovery is not may provide.

Is my bank responsible if I was tricked into sending money to the wrong account?

Generally, no. Because you authorized the transfer yourself, your bank is not liable for the fraud. However, some banks may reverse the transaction as a courtesy, especially if you report it immediately. Always ask your bank what options exist before assuming the money is gone.

How can I tell if an email from my bank or service provider is real?

Call the business directly using a phone number you find yourself, not one in the email. Ask whether they sent the message. Real businesses expect this kind of verification and will confirm or deny the email. Never click links in unsolicited emails asking you to verify information or make a payment.

What should I do if I think my email account was compromised and used to send fraudulent payment requests?

Change your email password immediately and enable multi-factor authentication. Check your email forwarding rules and recovery settings to make sure the scammer did not set up a way to stay in your account. Notify anyone you regularly send payment instructions to, so they know to verify future requests by calling you directly.

Does payment diversion fraud show up on my credit report?

No. Payment diversion fraud does not affect your credit because the money left your account legitimately. However, if the fraudulent payment was supposed to be a bill payment and you miss the actual payment deadline, that missed payment could be reported to credit bureaus. Contact the business you were supposed to pay and explain the fraud so they know the delay was not your fault.