{"id":5731,"date":"2019-08-27T09:43:54","date_gmt":"2019-08-27T07:43:54","guid":{"rendered":"https:\/\/www.organisator.ch\/?p=5731"},"modified":"2019-08-27T09:43:54","modified_gmt":"2019-08-27T07:43:54","slug":"besteller-und-zahlungsbetrug-nehmen-zu","status":"publish","type":"post","link":"https:\/\/www.organisator.ch\/en\/management\/finanzen_recht\/2019-08-27\/besteller-und-zahlungsbetrug-nehmen-zu\/","title":{"rendered":"Orderer and payment fraud on the rise"},"content":{"rendered":"
\"\"
Ordering and payment fraud are now among the most common cases of cybercrime. (Image: Pixabay.com)<\/figcaption><\/figure>\n

The fake boss is getting competition. In addition to the \"fake president\" scam, orderer fraud (\"fake identity\") and payment fraud (\"payment diversion\") have also been on the rise in recent years. According to analyses by credit insurer Euler Hermes, these three deceptive crimes have resulted in losses totaling more than 190 million euros since 2014, especially for companies in Germany, Switzerland and Austria. There was a sharp increase in the number of cases in 2018 with +35% compared to the previous year, especially in orderer fraud and with +24% in payment fraud.<\/p>\n

Smaller amounts, but easier...<\/h2>\n

\"For fraudsters, both orderer fraud and payment fraud definitely have their appeal,\" says Stefan Ruf, CEO of Euler Hermes Switzerland. \"Both are much easier to execute than Fake President.\" A fake president scam requires a relatively large amount of strategic planning as well as time-intensive preparation, such as spying on customs. In addition, perpetrators must be skilled at \"social engineering\" to get employees to make the desired payments while keeping it a secret. \"However, to redirect payment flows or provide a different shipping address, a short email is usually enough,\" Ruf says. \"The amounts are usually smaller, but it's quick as a flash - even for several companies at the same time. The numbers speak volumes here.\"<\/p>\n

Fraud is usually only discovered during the reminder run: perpetrators and prey long gone<\/strong><\/h2>\n

In orderer fraud, hackers impersonate customers. They initiate an order and then specify a different delivery address for an order via e-mail. For example, shoes are ordered to a vacant building, and the invoice goes to the existing customer. Since the latter never ordered the goods and, more importantly, never received them, he does not pay the invoice.<\/p>\n

\"The fraud usually only comes to light with the reminder run - several weeks later, depending on the payment deadline. By then, however, the fraudsters are long gone with the loot,\" says R\u00fcdiger Kirsch, fraud expert at Euler Hermes. \"The number of cases has risen sharply recently for both deception crimes. This means they are slowly but surely competing with 'big brother' Fake President.\"<\/p>\n

Hacker fraud: a case for fidelity insurance<\/strong><\/h2>\n

The goods or money are gone and, in the worst case, the balance sheet is ruined - usually even if the company has cyber or trade credit insurance. \"Trade credit insurance protects against defaults by buyers - but only for real companies, for example, if they are insolvent. However, I can't have a limit of insurance on a fraudster,\" says Kirsch. \"So if there is an underlying fraud and a hacker impersonates a company, has the goods delivered to a different address and this results in a financial loss, this is not a case for regular trade credit insurance, but for fidelity insurance (VSV). Incidentally, cyber insurance usually doesn't pay out for such cases of fraud by hackers either.\"<\/p>\n

Cyber insurance falls short<\/h2>\n

Cyber insurances usually focus on modules to protect against liability risks as well as against damages resulting from a business interruption caused by a cyber attack or damages due to negligent misuse. Comprehensive assistance services, in the case of reputational risks or, for example, for the rapid restoration of the IT infrastructure or the web store after cyber attacks, are also important elements, together with modules from legal protection and D&O insurance. Criminal acts are covered - if at all - only to a very small fraction.<\/p>\n

Fidelity insurance, on the other hand, primarily insures against targeted, criminal acts against a company. Unauthorized acts such as fraud or embezzlement by a company's own employees as well as by external third parties - especially hackers - are the main focus of fidelity insurance. Accordingly, financial losses caused by fake president, orderer or payment fraud are insured, as are phishing, keylogging or \"man in the middle\" and \"man in the cloud\".<\/p>\n

Overview of fraud schemes and their respective methods<\/h2>\n