You notice a payment you did not approve. A supplier says they never received money you transferred. A staff member shared an OTP with a caller. A customer claims they paid, but your account shows nothing, and you already released stock.
If you suspect fraud, the first few minutes matter. Your goal is to stop further loss, protect evidence and warn the right people. You do not need to solve everything immediately. You need a clear sequence that reduces damage while you get help.
Stop further loss first
When fraud is suspected, pause before sending more money, clicking more links or continuing a conversation with the suspicious contact. Scammers often try to extract a second payment or more information after the first success.
If a payment has not yet cleared, contact your bank immediately and ask whether it can be stopped. If goods have not yet been released, hold them until payment is confirmed in your account. If you are still on a call with a suspicious person, end the call and verify through an official channel.
Do not let embarrassment or urgency push you into further action. Many business owners discover fraud only after the first loss. The priority is preventing the next one.
Definition
First-response fraud sequence
A short ordered set of actions after suspected fraud: stop further loss, contact the bank or provider through official channels, secure affected accounts, save evidence and warn people who may be affected.
A payment that does not match any invoice
On Monday morning, you review your business bank statement. There is an EFT payment to a beneficiary you do not recognise. No one in the business recalls approving it.
You contact the bank using the number on your bank card, not a number from a recent SMS. You ask whether the payment can be traced or reversed. You change your banking app password and review linked devices. You save the statement and any related messages.
You tell your staff not to approve any banking notifications until accounts are checked.
Contact the bank or affected provider
If a payment, card, banking app or account is involved, contact the bank immediately. Explain what happened in plain terms: what you noticed, when it happened and what action you already took.
Ask whether the payment can be stopped, reversed or traced. The available response depends on the transaction type, timing and provider rules. Recovery is not guaranteed, especially after money has cleared to another account, but early contact improves the chance that something can be done.
Use official bank contact details, the number on your card, your bank's official website or a branch you know. Do not call numbers from suspicious emails, SMS messages or WhatsApp chats. Scammers sometimes stay on the line or send follow-up messages pretending to be the bank's fraud department.
If the fraud involves another provider, an insurer, payment platform, email host or WhatsApp account, contact that provider through its official channels too.
Secure affected accounts
Change passwords for banking apps, email, WhatsApp, business platforms, cloud storage, social media and payment systems. Review linked devices, remove any you do not recognise and log out of sessions that should no longer have access. If an OTP was shared or a link was clicked on a shared device, every account used there may be at risk.
Save evidence
Do not delete messages, emails or screenshots because they feel embarrassing or chaotic. They may support your report to the bank, insurer or police.
Save screenshots of suspicious messages, phone numbers and email addresses, invoices and proof of payment, banking details that were used, links from the message, dates and times of calls or transfers and names or titles the scammer used.
Store copies in a folder you can share with your bank or adviser. A clear timeline helps others understand what happened quickly.
Warn others who may be affected
Fraud often spreads beyond one payment. Tell staff, partners, suppliers and customers who may be targeted next, especially if your WhatsApp or email account was used to send messages from your business.
If a scammer impersonated your business, warn customers not to pay into new accounts sent from your compromised number. If a supplier's name was used, tell the real supplier so they can alert other clients. Warning others can stop a chain of false payments.
| Waiting to see if the problem resolves | Acting in the first minutes |
|---|---|
| Further payments or access may follow | Further loss is limited where possible |
| Evidence may be lost or overwritten | Messages and records are preserved |
| Staff and customers remain unaware | People who may be targeted are warned |
Review what happened
After the urgent steps, review how the scam reached your business. This is not about blame. It is about closing the gap so the same attack does not succeed again.
Ask how the scammer contacted you, who approved the action, what verification rule was missing, whether payment approvals need to change, whether passwords or devices need better protection and whether banking details should be verified differently in future.
A fraud incident can show where the business needs stronger controls, two-person approval, staff training or clearer WhatsApp rules.
A common mistake
The most common mistake is waiting to see if a suspicious payment clears or hoping the problem will resolve without reporting it. Delay gives scammers more time to move money and makes recovery harder. Another mistake is continuing the conversation with the suspicious contact, scammers may pressure you to send a second payment or share another code.
Your next step
Save your bank's official fraud line and your insurer's claims number in your phone today, separate from any message that arrives unexpectedly. Share the first-response sequence with anyone who handles money or accounts for the business.
Keep learning
You have completed the Stay Safe Online hub. Keep the payment, message and response rules where anyone who handles business money or accounts can find them.
The next hub, Prepare for Setbacks, helps you organise key documents so your business can respond faster when something goes wrong, including fraud, disputes or unexpected costs.