ArayaPRO Intelligence
Supplier Risk Watch
Real-world supplier fraud, payment risk and third-party failures — what happened, what went wrong, and how stronger supplier controls can reduce the risk.
13 risk briefs tracked · Latest 11 October 2026
No risk briefs match these filters yet.
The Invoice Was Real. The Supplier Was Real. One Bank-Account Change Redirected US$1.1 Million.
A New Jersey healthcare provider sent four ACH payments worth about US$1.1 million to a fraudster's account after emails posing as its safety-equipment supplier asked it to change bank details. The recipient has now pleaded guilty to money laundering conspiracy.
The Account Was Genuine. The $8 Million It Spent Wasn't Authorised.
Victoria's anti-corruption watchdog has charged a former senior National Gallery of Victoria employee with theft and misconduct in public office, alleging he used the gallery's own account to buy about A$8 million in mobile phones and sold them for personal gain over six years.
The Companies Were Registered. The Man Running Them Wasn't Who He Said.
A UK director banned twice for 15 years under different identities was jailed for four years after running fraud through seven companies and false names, leaving more than £200,000 in losses, the Insolvency Service says.
The Contract Was Competitively Bid. The Competition Wasn't Real.
A former U.S. Navy enlisted member was sentenced to three years in prison and ordered to pay $9.13 million in restitution after concealing a Navy insider's ownership stake, faking competing bids and invoicing for undelivered work to steer contracts to his own company.
The Payment Was Legitimate. The Bank Account Was Not.
A U.S. government IT contractor with system access to reset credentials and change bank details pleaded guilty to diverting more than US$107,000 in travel reimbursements — a scheme that continued for nearly a year after he left the job, the DOJ says.
The Vendors Looked Independent. Prosecutors Say One Man Controlled Them All.
Federal prosecutors allege a California nonprofit founder created sham vendors — with forged signatures, fake bids and fraudulent invoices — that appeared independent but had no real operations, diverting more than US$7.5 million in public homelessness funding.
The Supplier Was Real. The Invoice Was Expected. Only the Bank Account Was Fake.
Five new Business Email Compromise cases have diverted more than C$544,000 from Canadian organisations through fraudulent supplier bank-detail changes, Anishinabek Police Service warns — taking 2026 losses in the same pattern past C$894,000.
AUSTRAC Removes 45 High-Risk Payment Businesses — The Case Against Point-in-Time Due Diligence
AUSTRAC cancelled, suspended or refused 45 remittance and digital-currency exchange registrations in a year, citing businesses that were dormant, insolvent, wrongly registered, or that failed to notify it of material changes to their operations and ownership.
Two in Five Businesses Hit by Invoice Fraud, New Research Finds — Averaging US$367,000 in Losses
New industry research from Ivalua and Sapio Research found 40% of 800 procurement decision-makers across the US, UK, Germany and France experienced invoice fraud in the past 12 months, with affected organisations reporting average losses of US$367,000.
The Email Confirmed Itself. $7.5 Million Went to the Wrong Account.
A Nigerian national was sentenced to eight years in U.S. federal prison for a business email compromise scheme that diverted more than US$7.5 million from two charities — using a second compromised email account to falsely confirm the fraudulent payment.
Bathla Collapse Exposes Downstream Supplier and Subcontractor Risk
Sydney developer Bathla Group entered administration on 25 August with debts above $3.2 billion, leaving subcontractor Delta Foundations owed close to $400,000 as an unsecured creditor — a reminder that supplier risk doesn't begin and end with fraud.
Payment Redirection Fraud Is Rising as Supplier Verification Struggles to Keep Up
Australian businesses lost $166.8m to payment redirection scams in 2025 — up 9.3% on 2024 — as criminals increasingly substitute fraudulent bank details into an otherwise genuine supplier payment rather than relying on a fake invoice.
The Invoice Was Real. The Bank Details Weren't.
A Catholic Development Fund case study of a foiled payment redirection attempt: a supplier's compromised email requested a bank-detail change with a genuine invoice attached, and only an independent phone call caught it before the payment went out.
Supplier Risk Watch
Stay ahead of supplier risk.
Practical intelligence on emerging supplier threats, real-world incidents and the controls that reduce your exposure.
Supplier-risk intelligence delivered to your inbox. No noise. Submitting this form subscribes you to Supplier Risk Watch emails — see our Privacy Policy.
You're on the list.
We'll send you the latest Supplier Risk Watch briefing.
See how ArayaPRO helps protect your supplier ecosystem
Onboarding, bank validation, change monitoring and sanctions screening — built to close the gaps behind incidents like these.