That number is not a typo.
To put that in perspective: $442 billion is larger than Nigeria’s entire GDP. It moved out of legitimate businesses and into criminal networks. A significant portion of it moved through cross-border payment channels, the exact same rails your business uses to pay suppliers, settle invoices, and move working capital across borders.
If you are a treasury manager, a finance lead, or a business owner making international payments in 2026, fraud is a direct operational risk sitting inside your payment workflows right now.
This guide breaks down how the money is being stolen, why cross-border payments are the primary target, and what you need to do to ensure your funds are not part of next year’s number.
Why Cross-Border Payments Are Fraud’s Favourite Target
Before you can protect your payments, you need to understand why international transfers attract more fraud than domestic ones.
The answer comes down to four structural vulnerabilities that exist in almost every cross-border payment flow.
- Multiple parties, multiple gaps: A cross-border payment typically passes through your bank, one or more correspondent banks, a receiving bank in another country, and sometimes a payment intermediary. Each handoff is a point where account details can be intercepted, redirected, or manipulated. The more parties involved, the greater the attack surface.
- Settlement delays hide the crime: Domestic payments can be reversed within hours. International transfers often take one to five business days to clear. The international nature of cross-border transactions delays fraud detection, giving criminals significantly more time to move stolen funds before the scheme is uncovered. By the time your finance team flags a suspicious payment, the money is often already gone.
- Regulatory fragmentation creates blind spots: in fragmented regions like Africa, payment rails operate in silos. The connectivity gap between the region and Western countries creates a major bottleneck for payments and a hidden pathway for fraudulent activity. Every jurisdiction guards its financial borders differently, and that misalignment is exactly where bad actors find the gaps they need.
- Recovery is near impossible. According to the Association of Finance Professionals, just 22% of businesses were able to recover the majority of funds after a successful fraud attempt. For every dollar lost to fraud, businesses spent $4.60 on recovery, damage mitigation, and shoring up defences. The math is brutal: the cost of being defrauded is five times the value of what was stolen.
The Fraud Threats Targeting Your Business Right Now
Not all fraud looks the same. The schemes attacking cross-border B2B payments in 2026 fall into four categories, and your finance team needs to recognise all of them.
Business Email Compromise (BEC): The One That Costs the Most
Business Email Compromise is the most common type of fraud in the world today, cited by 63% of Association of Finance Professionals survey respondents as the scheme they encounter most.
Here is how it works in practice. A fraudster monitors email traffic between your company and a supplier, sometimes for weeks. When a large invoice is due, they send a carefully timed email that appears to come from the supplier, informing you that their banking details have changed and providing new account numbers. Your team processes the payment to the new account. The supplier never receives it. The money is gone.
INTERPOL identifies Business Email Compromise as one of the most significant threats across Africa in terms of both the volume of attacks and their financial impact, with businesses consistently identified as the primary targets.
The reason BEC is so effective is that it does not rely on hacking your systems. It exploits trust and urgency, two factors that are always present when a finance team processes supplier payments under deadline pressure.
AI-Powered Fraud: The New Scale of the Problem
This is where the 2025 fraud landscape shifted in a way that most businesses have not fully absorbed.
INTERPOL warns that AI-enhanced fraud is now 4.5 times more profitable than traditional methods. “Agentic AI” systems can autonomously plan and execute complete fraud campaigns, from reconnaissance to ransom demands, without human intervention at each step.
What this means in practical terms: the fraudster who used to manually research your company, craft a convincing email, and time their attack now has tools that do all of that automatically, at scale, across thousands of targets simultaneously. Voice cloning and deepfake tools can replicate a person using just a few seconds of audio, making impersonation scams significantly harder to detect. Your CFO’s voice can now be faked in a phone call authorising a payment. Your CEO’s email writing style can be replicated well enough to pass a basic review.
The barrier to executing a sophisticated fraud campaign has collapsed. This is the single most important change in the fraud environment heading into 2026.
Invoice Fraud: Hidden in Plain Sight
Invoice fraud in the US averages $133,000 per incident, and nearly one-third of businesses were targeted with fake invoices in the past year.
In cross-border payment contexts, invoice fraud typically takes one of two forms. The first is fake invoice injection, a fraudulent invoice that mimics a real supplier’s format, submitted at the right time in the payment cycle to avoid scrutiny. The second is account detail substitution, a genuine invoice from a real supplier, but with the banking details quietly changed to route payment to a fraudulent account.
False documentation is particularly difficult to detect in cross-border transactions, where language differences, unfamiliar banking formats, and document complexity can easily obscure fraudulent activity. A Nigerian business paying a supplier in Germany, the UK, or China is less likely to immediately notice that an IBAN or sort code has been altered than they would with a familiar domestic account number.
Insider Fraud: The Risk Inside Your Own Team
This one is harder to discuss but impossible to ignore. In 2023, 71% of large businesses reported between 21 and 40 insider fraud attempts per year. Internal fraud occurs when employees with access to payment systems exploit that access, either independently or in coordination with external parties.
In cross-border payment operations, insider fraud is particularly dangerous because transactions are large, approval chains are sometimes thin, and the international nature of the payments makes them harder to trace and reverse quickly. Segregation of duties, where no single person can both initiate and approve a payment, is the most effective control. It is also the one most commonly bypassed in lean finance teams under pressure to move fast.
What Your Fraud Exposure Looks Like Right Now
Take a moment to honestly map your current situation against these questions.
- Does your team verify changes to supplier banking details over a second, independent channel before processing payment? Not by replying to the email that arrived with the new details, by calling a known contact number, or using a pre-established verification method?
- When a large international transfer is approved, how many people are in that approval chain? Is there at least one person in that chain who did not initiate the payment?
- Do you have a clear record of your top suppliers’ banking details, independently verified and stored separately from your email inbox?
- Can you see, in real time, the status of your cross-border payments from initiation to settlement? Or do you only find out about a problem when the supplier chases you for funds that haven’t arrived?
If any of those questions produce an uncertain answer, the gap between your current controls and what the 2026 fraud environment requires is likely wider than you think.
How to Protect Your Cross-Border Payments in 2026
These are not theoretical best practices. They are the specific controls that separate businesses that absorb fraud losses from those that avoid them.
- Verify Every Banking Detail Change Through a Second Channel
This is the single most effective control against BEC fraud, and it costs nothing to implement. Every time a supplier, vendor, or counterparty communicates a change to their banking details, regardless of how legitimate the email looks, regardless of whether the email address matches exactly, your team calls the supplier on a pre-established phone number to confirm. Not the number in the email. A number from your existing records or your contract documentation.
Contacting the supplier using a known, pre-established phone number, not one provided in the email, to confirm any banking changes, is one of the most reliable defenses against payment redirection fraud. This one step, consistently applied, stops most BEC attempts.
- Build Multi-Layer Approval for High-Value International Transfers
Multi-factor authentication, dual- or triple-payment approval workflows for high-value transactions, and vendor verification systems that independently validate supplier bank details before the first payment are foundational controls for B2B payment security.
In practice, this means no single employee should be able to both initiate and approve an international wire transfer above a defined threshold. The threshold depends on your business, but a sensible starting point for most Nigerian businesses making cross-border payments is any single transaction above $10,000 equivalent. Above that level, two separate people in your finance chain confirm and approve the payment before it goes out.
- Choose a Payment Partner With Real-Time Transaction Visibility
One of the most overlooked fraud vulnerabilities in cross-border payments is the gap between sending a payment and knowing it has arrived. When you cannot see the real-time status of a transfer, you cannot identify a problem until the supplier reports non-receipt, by which point the fraud has already been executed, and the window for intervention has closed.
Your payment provider should give you full visibility of every transaction from initiation to final settlement, with alerts for anomalies, delays, or unexpected routing changes. Building security into how payments are approved, initiated, and completed, with full visibility and resilience at every step, is what separates a genuinely secure payment operation from a reactive one.
At Bluebulb, this is built into the core of how we process cross-border payments. Every transaction is trackable in real time. Every anomaly triggers an alert. And every payment above defined thresholds goes through a verification layer before it clears, not after.
- Separate Your Payment Initiation from Your Payment Approval
This is the control that closes the insider fraud gap. The person who creates a payment instruction should never be the same person who approves it. The person who manages supplier relationships should not also have unilateral authority to change supplier banking details in your system.
Maintaining segregation of duties across payment initiation, approval, and reconciliation, combined with real-time alerts for suspicious activity, is one of the most effective structural controls against both internal and external B2B payment fraud.
If your team is small enough that strict segregation is difficult, compensate by setting hard transaction limits for single-approver payments and requiring mandatory review for anything above those limits. The control does not need to be complex. It needs to be consistent.
- Train Your Team to Recognise Social Engineering
Two-thirds of scams are completed within a single day of first contact. In South America, more than half occur within minutes of initial contact. The speed of modern fraud attacks means that the time your finance team has to recognise and stop a suspicious payment is shrinking.
Training is not a once-a-year compliance box to tick. It is an ongoing conversation with the people who have access to your payment systems. They need to know what BEC looks like. They need to feel empowered to pause, verify, and escalate when something feels wrong, even when the email looks legitimate and the request sounds urgent. Especially then.
The urgency in a fraudulent email is deliberately manufactured. “Please process this today, our supplier is threatening to halt delivery.” “The CEO needs this wire sent before the close of business.” Teaching your team to treat urgency as a red flag rather than a reason to skip verification is one of the most cost-effective fraud controls available.
The Bluebulb Standard: What Secure Cross-Border Payments Look Like
At Bluebulb, we built our cross-border payment infrastructure with these exact threats in mind. We know that the businesses sending international payments through our platform, Orbita, are not just moving money; they are protecting their working capital, their supplier relationships, and in many cases, their operating continuity.
Every payment processed through Bluebulb is subject to real-time transaction monitoring. Anomalies are flagged automatically. High-value transactions go through a verification layer before settlement. And our compliance infrastructure is built to meet the AML and KYC standards that protect your business on both ends of the transaction, not just on the sending side.
We also give your finance team full visibility into the status of every cross-border payment on our Orbita platform, from initiation to final receipt.
The $442 billion that was lost to fraud in 2025 did not all go to unsophisticated victims. Much of it went to well-run businesses with finance teams working hard, but operating on payment infrastructure not built to withstand the demands of the 2026 fraud environment.
You do not have to be one of them.
You need a regulated global payments partner that delivers compliant, reliable cross-border solutions at all times. Contact us today.
Leave a Reply