Stories
Real cases where a lookalike domain or a taken-over mailbox moved money. Plain English — then one next step.
West Geauga schools lost $41,500 to a vendor email scam
A lookalike vendor email redirected ACH payments. What happened — and one free next step at spoofcoach.com.
Read →
Montgomery Tank lost $40,000 after a trusted vendor’s email was taken over
A familiar vendor invoice cost $40,000 — the mailbox wasn’t theirs anymore. Free domain check at spoofcoach.com.
Read →
An accounting firm in Pooler wired $47,000 on a fake vendor invoice
The email looked perfect and referenced a real project. It wasn’t. Free check at spoofcoach.com.
Read →
Hamilton lost more than $274,000 after a vendor’s EFT details were changed twice
Someone posing as a vendor got staff to change EFT banking details — twice. More than $274,000 went to accounts the fraudster controlled.
Read →
Athens lost $721,976 after lookalike Pepper Construction domains entered a real email thread
Lookalike Pepper Construction domains slipped into a live fire-station thread. Athens deposited $721,976 into the wrong account.
Read →
Portland nearly lost $6.7M on a Bull Run payment after someone posed as MWH’s John Lisman
An imposter rewrote MWH–Kiewit vendor bank details in Ariba. Portland nearly lost about $6.7 million — then recovered the funds.
Read →
Unatrac lost nearly $11 million after thieves used its CFO’s mailbox to push fake supplier wires
Thieves used the CFO’s real mailbox to push fake supplier wires. Finance processed 15 payments totaling nearly $11 million.
Read →
JE Cleantech lost $794,934 after a fake DTC email redirected a dividend wire
A fake Depository Trust Company email redirected a cash-dividend wire. JE Cleantech lost USD 794,934.04.
Read →
Ubiquiti lost $46.7 million after fraudulent requests hit its finance team
Fraudulent requests hit finance. Thieves moved $46.7 million from a Hong Kong subsidiary into overseas accounts.
Read →