Socially engineered fraud is projected to exceed $40 billion annually by 2027, and generative AI is accelerating that shift.

Emails, invoices, financial documents, and entire conversation threads can now be produced instantly. Now such an easy and scalable lift, the result is payment fraud that moves through business workflows looking complete and legitimate.

Based on the analysis of 260 real-world B2B payment fraud incidents in 2025, this report reveals how attackers engineer payment requests to move through business workflows.

When Finance & Security Controls Break Down

There is no longer just a security problem or a finance problem. Fraud is moving between systems slipping through gaps in ownerships, workflows, and controls.

For Finance: 39% of attacks included invoices, W-9s, or bank details—arriving ready to be paid and harder to verify at scale.

For Security: 59% of attacks used multiple coordinated tactics—bypassing email security, identity-based controls, and rule-base detection systems.

You’ll learn:

• What 3 attack playbooks are used in real B2B payment fraud attempts
• How attackers make fraudulent requests look fully legitimate
• What finance and security leaders must change to stop fraud before money moves