# International Wire Fraud: Why Cross-Border Money Is Gone | RankShield Financial > International wire fraud sends payments overseas, where recovery collapses once funds cross a border. Why cross-border is worse, and how to verify first. > > Source: https://rankshieldfinancial.com/resources/international-wire-fraud/ · RankShield Financial (verifiable pre-settlement payment security) RankShield Network · Financial · Payment Fraud # International Wire Fraud: Why Cross-Border Money Is Almost Never Recovered, and How to Verify Before It Leaves International wire fraud is the same payee-swap scam as domestic wire fraud, with one brutal difference: once the money crosses a border into a foreign account, the odds of getting it back collapse. That is exactly why the only reliable defense is verifying the overseas payee before the wire goes. By Jamie Kloncz Founder, RankShield Financial September 9, 2026 · 12 min read Key takeaways - International wire fraud is business email compromise aimed at cross-border payments: a real overseas supplier or contractor payment is diverted to a foreign account the fraudster controls, usually by a spoofed invoice or changed banking details. - The defining problem is recovery. Once a wire crosses a border, it passes through correspondent banks into another jurisdiction and is moved onward or withdrawn quickly, so the domestic clawback options largely do not apply and the money is usually gone. - The FBI reports fraudulent transfers are frequently routed through intermediary banks abroad, most often in the United Kingdom and Hong Kong, then China, Mexico, and the UAE. BEC has caused over $55 billion in exposed losses since 2013, with $3.046 billion in 2025 alone and 86 percent moving by wire or ACH. - Companies that pay overseas suppliers, manufacturers, freelancers, or contractors are the most exposed, because a foreign vendor changing bank details is routine enough to seem normal, and verifying it is harder across time zones, languages, and unfamiliar banking formats. - Because recovery is effectively off the table, verification before the wire is the entire defense. Verifying the overseas payee and a named approval before an international wire settles is what RankShield Financial does, and it matters more here than anywhere, because there is no second chance. International wire fraud is the same crime as domestic wire fraud, with one difference that changes everything: recovery. When a business is deceived into wiring money to a fraudster domestically, there is a narrow but real chance of clawing it back. When that wire crosses a border into a foreign account, that chance drops toward zero, because the money passes through correspondent banks into a different legal system where it is withdrawn or moved onward before anyone can act. This matters enormously for any company that pays overseas suppliers, manufacturers, or contractors, which is a growing share of businesses. Business email compromise, the engine of this fraud, has caused more than $55 billion in exposed losses reported to the FBI between October 2013 and December 2023 1 , and the FBI notes that fraudulent funds are frequently routed through intermediary banks abroad, with the United Kingdom and Hong Kong the most common, followed by China, Mexico, and the UAE. This guide explains why cross-border wire fraud is so much harder to recover from, who is most exposed, and why verifying the overseas payee before the wire leaves is not just the best defense but effectively the only one. ## The same crime, a far harder ending International wire fraud is not a separate scam from the ones covered across this site; it is the [wire transfer fraud](https://rankshieldfinancial.com/resources/wire-transfer-fraud/) family pointed at a cross-border payment. A fraudster compromises or spoofs an email in the transaction, most often posing as an overseas supplier or an executive, and supplies new banking details or a fraudulent invoice, and a real, authorized employee wires a legitimate payment to the wrong account. Up to the moment the money leaves, it is the identical payee-swap mechanism as a domestic case: an authorized payment to an account the sender was deceived into trusting, which is why it clears every control built to catch an intruder. What changes is what happens after. A domestic fraudulent wire can sometimes be frozen if reported fast, because it stays inside one banking system and one jurisdiction. An international wire does not. It moves through one or more correspondent or intermediary banks, often in a third country, before reaching the beneficiary account abroad, and the FBI’s data shows those intermediaries cluster in a handful of places: the United Kingdom and Hong Kong most often, then China, Mexico, and the UAE 1 . Each hop adds delay and distance, and the destination sits in a legal system where a US victim and US law enforcement have little reach. The crime is the same; the ending is far harder, and that difference is the whole reason to treat international wires as their own risk. ## Why cross-border recovery collapses Domestically, wire fraud recovery is already the exception rather than the rule, as the guide on [wire fraud recovery](https://rankshieldfinancial.com/resources/wire-fraud-recovery-first-72-hours/) explains: the FBI’s Recovery Asset Team froze $679 million of $1.16 billion in attempted thefts in 2025, a 58 percent rate 2 , but only on the cases reported fast enough to act on. Cross-border, even that narrow chance shrinks. The FBI’s process for freezing fraudulent international wires, its Financial Fraud Kill Chain, depends on reporting within a very tight window, and then on cooperation from foreign banks and authorities that is slower, subject to different laws, and often simply unavailable. By the time a freeze request reaches a beneficiary bank in another country, the funds have usually been withdrawn or layered onward. Several factors compound the problem. Time zones mean a fraud discovered at the end of a US business day may not reach the foreign bank until its next business day, well outside the window. Different jurisdictions mean no single authority can order a freeze, and mutual legal assistance is measured in months, not hours. Correspondent banking adds intermediary hops that obscure where the money actually is. And fraudsters deliberately choose destinations and mule networks in places where recovery is hardest. The honest conclusion is blunt: for an international wire, you should assume that if the money leaves, it is gone. That assumption is not defeatism; it is the correct basis for deciding where to put your effort, which is entirely before the wire, not after. ## Who is most exposed The businesses most at risk are the ones for whom paying overseas is normal, because normal is exactly what the fraud imitates. Importers and companies with international supply chains wire large sums to foreign manufacturers and suppliers on a regular schedule, so a supplier emailing updated banking details is an ordinary event, not a red flag. Companies using overseas contractors, freelancers, or outsourced teams pay foreign accounts routinely. Firms doing cross-border deals, acquisitions, or licensing move large one-time sums internationally. In each case the fraud hides inside a legitimate, expected payment, and the international dimension makes the usual verification harder to perform, which fraudsters exploit. That added friction is the quiet reason international wire fraud succeeds. Verifying a domestic vendor’s banking change means a phone call to a number you already had, in your language, during your business hours. Verifying an overseas supplier can mean a call across a large time-zone gap, in a second language, to a company whose banking formats, IBANs, and SWIFT or BIC codes are unfamiliar, sometimes through an intermediary or a local representative. Each of those is a reason a busy team is tempted to skip the check, and skipping it is precisely what the scam needs. The exposure is highest exactly where verification feels most inconvenient, which is why it has to be built into the process rather than left to willpower. ## The defense: verify before it leaves the country Because recovery is effectively off the table, the entire defense for international wire fraud lives before the payment, and it is a version of the same discipline this site returns to everywhere: verify the payee out of band before you send. For an overseas payment that means confirming the beneficiary’s bank details, the account, the IBAN or account number, and the SWIFT or BIC code, through a channel the requester could not have controlled, before the first wire to new or changed details. It means using a contact you already had for the supplier, not one supplied in the request, and holding the payment until that confirmation is complete, however inconvenient the time zone. The general method, including the callback script and the red flags, is in the guide on [how to verify a wire request](https://rankshieldfinancial.com/resources/how-to-verify-wiring-instructions-bank-changes/); the international case simply raises the stakes, because there is no recovery to fall back on. Two additions are specific to cross-border payments. First, watch for the tells that fit the international setup: a supplier suddenly asking to be paid to an account in a different country than where they operate, a switch to a new intermediary bank, or a request to change from a long-standing account for a vaguely explained reason. A beneficiary country that does not match the supplier’s location is a serious warning sign. Second, sanctions and screening are a separate obligation on international payments, and while that is a compliance matter rather than fraud prevention, the same discipline of checking the payee before you pay serves both. The unifying point is that every meaningful control on an international wire happens before it is sent, because after it is sent there is nothing left to control. ## Where RankShield Financial fits, and where it does not RankShield Financial is built for the one moment that matters most on an international wire: the verification before it leaves. It is a verification and attestation layer in the payment authorization path, not a bank, a foreign-exchange provider, or a sanctions-screening system, and it never takes custody of funds. Before a wire to a new or changed overseas payee settles, it verifies that the beneficiary account is the one actually intended and that a named person approved the payment, and it seals a checkable record. Because it acts at origination, the only point where you have any control over a cross-border payment, it is aimed precisely where international wire fraud has to be stopped, given that recovery afterward is not realistic. The boundaries stay explicit, and they matter more when payments cross borders. RankShield verifies the payee and the approval and proves the decision; it does not perform sanctions or OFAC screening, it does not handle currency conversion, it does not read your email or detect the phishing that started the fraud, and it is a design-partner-stage product that claims no network it has not built. It sits alongside your bank’s international-payment controls and your compliance screening, not in place of them. What it adds is the independent verification that an overseas payee is genuine and approved before an irreversible cross-border wire goes out. If you pay suppliers or contractors abroad and want that check in front of your international wires, you can [see how it works](https://rankshieldfinancial.com/how-it-works/) or [request access](https://rankshieldfinancial.com/contact/). ## The takeaway for anyone paying overseas If your business sends money across borders, internalize one rule above all others: an international wire is a decision you only get to make once. There is no meaningful undo, no chargeback, and only the slimmest chance of a recall, so the care that a domestic payment can partly recover from, an international one cannot. That is not a reason to fear paying overseas; it is a reason to make verification of every new or changed foreign payee a required, non-negotiable step, performed on a channel the requester could not control, before the wire is released. Build that into the process so it survives a tight deadline and an awkward time zone, because those are exactly the conditions the fraud is designed to exploit. The reframe worth keeping is that the extra difficulty of verifying an overseas payee is not a reason to skip the check; it is the reason the check is worth so much. Every obstacle that makes verification inconvenient, the time-zone gap, the language, the unfamiliar bank codes, is also an obstacle the fraudster is counting on to make you send without confirming. Turn that around, treat the friction as the signal to slow down rather than speed up, and verify before the money leaves the country, because once it has, the honest truth is that it is almost certainly gone for good. Operate it ## Verify a payment before it settles Compose a payment and the conditions around it, then run the same check the product runs on a live rail. The verdict comes back before the money would move. Pay to Amount (USD) Conditions around this payment Bank details changed by email First-time payee Amount over approval policy Approver signature verifies PRE-SETTLEMENT VERDICT RANKSHIELD NETWORK Compose a payment on the left and run the check. The verdict is returned before the money moves, the way the product returns it on a live rail. Sandbox demo · reproduces the product’s verdict logic and signing metadata · not a live network call Downloadable · SVG International wire fraud has one defining feature: recovery collapses once the money crosses a border. Before it leaves, you control the originating bank and can verify the payee, in one jurisdiction, during your own hours. After it crosses, it moves through correspondent banks (most often in the UK and Hong Kong, then China, Mexico, and the UAE) into a foreign beneficiary account in another legal system and time zone, and is withdrawn or moved onward within hours. The only control point you fully own is at origination, so the entire defense is verifying the overseas payee before the wire goes. FAQ ## Frequently asked questions Every question buyers ask before they trust a payment-security platform, answered directly. JAMIE KLONCZ · RANKSHIELD FINANCIAL ONLINE Pick a question on the left, or search above. You will get the direct answer, the way an answer engine would give it. REQUEST ACCESS → Self-check ## How exposed are your payments? Five controls decide whether an authorized-payment scam gets through on a fast rail. Answer them honestly to see where you stand. - 01 Do you send payments on instant or same-day rails (RTP, FedNow, same-day ACH)? - 02 Can one person both change a vendor’s bank details and approve the payment? - 03 Do you always confirm a bank-detail change on a number from your own files, not the request? - 04 Is the first payment to a new or changed payee held for verification before it goes out? - 05 Do you keep a signed record of exactly who approved each payment? Answer all five to see where you stand · 0/5 References - [FBI IC3, PSA240911: Business Email Compromise, The $55 Billion Scam (over $55B in exposed losses Oct 2013-Dec 2023; intermediary foreign banks most often UK and Hong Kong, then China, Mexico, UAE; request a recall immediately)](https://www.ic3.gov/PSA/2024/PSA240911) - [FBI IC3, 2025 Internet Crime Report (business email compromise $3.046B, 86% via wire or ACH; Recovery Asset Team froze $679M of $1.16B, 58%)](https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf) - [Association for Financial Professionals, 2026 AFP Payments Fraud and Control Survey (76% of organizations faced attempted or actual payments fraud)](https://www.financialprofessionals.org/training-resources/resources/survey-research-economic-data/details/payments-fraud) About the author ## [Jamie Kloncz](https://rankshieldfinancial.com/about/) Founder, RankShield Financial Jamie founded RankShield Financial to verify a payment’s intent and authority before it settles on instant and tokenized rails. These guides are written from building that product and reading the primary sources directly: every statistic here links to its original filing or report, never a secondhand summary. - Primary sources only: each figure links to the original filing - Honest boundaries: what verification can and cannot do is stated plainly - Last verified September 9, 2026 How RankShield Financial verifies → Request access → Verify, then settle ## See your payments verified before they settle. RankShield Financial is rolling out with design partners on instant and tokenized rails. Request access and we’ll map it to your settlement flow. Request access How it works ## Frequently asked questions ### What is international wire fraud? International wire fraud is business email compromise aimed at a cross-border payment: a fraudster deceives a company into wiring a legitimate payment to a foreign bank account they control, usually by posing as an overseas supplier or executive and supplying a fraudulent invoice or changed banking details. Up to the point the money leaves, it is the same payee-swap mechanism as domestic wire fraud, an authorized payment to an account the sender was tricked into trusting, so it clears the controls built to catch intruders. What sets it apart is what happens next: the wire moves through correspondent banks into a foreign jurisdiction where the funds are quickly withdrawn or moved onward, and recovery becomes far harder than in a domestic case. Business email compromise has caused more than $55 billion in exposed losses reported to the FBI since 2013, with fraudulent funds frequently routed through intermediary banks in the UK, Hong Kong, China, Mexico, and the UAE. ### Can you recover money from an international wire fraud? Rarely, and you should plan as if you cannot. Domestic wire fraud recovery is already the exception; the FBI’s Recovery Asset Team froze $679 million of $1.16 billion in attempted thefts in 2025, but only on cases reported fast enough. Cross-border, even that slim chance shrinks, because the money passes through correspondent banks into another legal system where a US victim and US authorities have little reach, and it is usually withdrawn or layered onward before a freeze can be arranged. Time-zone gaps push discovery outside the tight reporting window, different jurisdictions mean no single authority can order a freeze, and international cooperation is measured in months. If you suspect a fraudulent international wire, contact your bank immediately to request a recall and report it to the FBI at ic3.gov the same day, because speed is the only lever, but the honest expectation is that once the money has crossed a border, it is almost certainly gone. ### Why are cross-border payments targeted more? Because they combine large amounts with the worst possible recovery odds, which is exactly what a fraudster optimizes for. International wires to suppliers, manufacturers, and contractors are often large and routine, so a foreign vendor changing banking details looks normal rather than suspicious. Once the money is sent, it lands in a jurisdiction where clawback is impractical, so the fraudster gets to keep it. And the verification that would stop the fraud is harder to perform across time zones, languages, and unfamiliar banking formats like IBANs and SWIFT codes, so businesses are more likely to skip it. The FBI reports fraudulent funds are frequently routed through intermediary banks abroad, most often in the United Kingdom and Hong Kong, then China, Mexico, and the UAE, which reflects where recovery is hardest and mule networks are established. High value, low recoverability, and harder verification together make cross-border payments a preferred target. ### How do you verify an overseas supplier’s bank details? Confirm the details out of band before the first wire to new or changed information, using a contact you already had for the supplier rather than one from the request. Call a known number from the signed contract or a prior invoice, not a number in the email asking for the change, and have them confirm the account or IBAN and the SWIFT or BIC code from their records. Account for the practical friction deliberately: plan around the time-zone gap rather than skipping the call, use a known local representative if language is a barrier, and treat unfamiliar bank formats as a reason to verify carefully, not to wave the payment through. Watch for international-specific red flags, especially a beneficiary account in a different country than where the supplier operates, a switch to a new intermediary bank, or a vaguely explained change from a long-standing account. Hold the payment until the verification is complete, because for an international wire there is no recovery to fall back on. ### Does insurance or the bank cover international wire fraud losses? Often not fully, and you should not assume coverage, though this is general information rather than legal or insurance advice. Banks are frequently not liable for a wire the business authorized, even when it was authorized under deception, and business accounts do not carry the consumer protections that would make an individual whole, so the loss commonly rests with the company. Cyber and crime insurance may cover social-engineering fraud, but often through a sub-limit lower than the policy’s headline, and carriers increasingly ask whether the insured followed its own documented verification procedure before paying a claim, as the guide on whether cyber insurance covers wire fraud explains. For an international wire the practical result is that neither the bank nor an insurer can be relied on to restore the money, which reinforces the central point: prevention through verification before the wire is the only dependable protection. Confirm your coverage and liability with your broker, bank, and counsel.