Salary-diversion fraud is the payroll cousin of invoice redirection. An attacker, posing as an employee, emails HR or payroll asking to 'update my bank account'. The details are changed, and on payday the salary lands in the fraudster's account. The employee only finds out when their pay doesn't arrive.
De ce il payroll este esposto
Bank-detail changes in payroll often arrive by email and are processed without an independent check that the new account actually belongs to the employee. The IBAN is valid, the request looks routine, and the change sticks — until payday.
verificatie la modifica, nu solo la distinta
The riskiest moment is a bank-detail change. Verifying the employee name against the new IBAN at that point — and again before the run — catches diversion before money moves.
Rutyna verificării listy salariilor
- 1 Verify the employee name against the IBAN whenever bank details are first captured or changed.
- 2 Tratta una «Geen overeenkomst» cum stop e conferma cu il dipendente pe un canale noto — nu l'email care chiede la modifica.
- 3 Before each payroll run, batch-verify the file so any mismatched account is flagged before release.
Farlo pe larga scală
Oltre una manciata de dipendenti, i controale manuali nu scalăno. La Verification of Payee poate verificatie fiecare riga de un file salarii via API prima la rilascio, sau il personale poate fare verificatie estemporănee de la dashboard. RoxPay offre entrambi, astfel i echipă salarii e HR pot mettere una verificatie la nume davanti a fiecare plată de salariio.