In an overboeking autorizat (APP) scam, there is no stolen card and no hacked password. The victim is manipulated into sending money themselves — to a fake supplier, a spoofed 'safe account', or an invoice with the fraudster's IBAN swapped in. Because the customer approves it, most fraud engines never fire.
Dlaczego sam IBAN nu wystarczy
Traditional overboekings validate the IBAN's format and routing, but never check who actually owns the account. A fraudster's IBAN is perfectly valid, so the payment sails through. The one piece of information that would expose the scam — does this name belong to this account? — is exactly what is missing.
La debolezza comune este il nume
Whether it's invoice redirection, CEO fraud or a romance scam, they all share one trait: the account does not belong to who the victim thinks. Verifying the begunstigde name is the single most direct countermeasure.
How Verification of Payee breaks the chain
La VoP chiede alla bancă la begunstigde, în timp real, se il nume corrisponde all'IBAN — e mostra la răspuns a betalerul înainte de autorizare. I quattro rezultate standard fungono de asemenea de la segnali de fraudă:
- Corrispondenza — nume e cont coincidono; l'rezultat atteso, a basso risc.
- Parziale — piccola differenza; conferma înainte de pagare.
- Nessuna — il classico campanello d'allarme: il cont nu appartiene la begunstigde indicato. Fermati.
- Not available — treat an unverifiable new begunstigde with extra caution.
Un avviso nell'unico momento care conta
The power of VoP is timing. The warning appears at the point of payment, while the victim still controls the money — not in a fraud report the next day. That clear, well-timed signal is often enough to break the spell of social engineering.
RoxPay eroga această Verifică sullo scaremă SEPA VoP via API e dashboard, astfel bănci, PSP e companii pot mettere una Verifică la nume la begunstigde davanti a fiecare overboeking în euro e ridurre le perdite de la fraudă APP.