Mark ZhongDocumented public case · Payment redirection
The $17,000 “new bank details” email
The supplier was real. The order was expected. The email looked familiar. Only the beneficiary was false.
Australia’s competition and consumer regulator published an illustrative victim story drawn from real examples. An accounts manager received what appeared to be an email from an established Asian ball-bearing supplier. It requested a bank-detail update because of a supposed finance-system change. The company updated its records and sent AUD 17,000. The genuine supplier never received it; shipment was cancelled. The buyer estimated the total loss, including disruption, at more than AUD 30,000.
Why experienced buyers still fall for it
This was not a random cold email. The attacker inserted a plausible request into an existing commercial routine. Familiar supplier name, expected invoice timing and ordinary payment language lowered the buyer’s guard. Replying to the suspicious email would not have solved the problem because the attacker controlled the conversation.
What a pre-payment check should separate
- Supplier identity: Is the Chinese legal entity real and active?
- Transaction identity: Which entity signed the contract and issued the invoice?
- Payment identity: Who owns the newly supplied beneficiary account?
- Change authorization: Was the change confirmed through an independently sourced channel?
Before paying changed bank details
- Stop the payment workflow.
- Call a previously verified supplier contact—not the number in the change email.
- Compare the beneficiary name and country with the contract, license and prior payments.
- Require written explanation for any third-party or Hong Kong payee.
- Use two-person approval for beneficiary changes.
What supplier verification can and cannot do
A corporate-record check can identify the contracting company and show whether a named related entity has a documented connection. It cannot authenticate bank ownership directly with a bank or prove that an email account is uncompromised. The payment-change procedure remains essential.
Long-tail searches this case answers
| Query | Intent |
|---|---|
| supplier changed bank account details scam | Immediate payment-risk check |
| Chinese supplier sent new bank details | China-specific validation |
| invoice beneficiary does not match supplier | Entity mismatch |
| how to verify supplier bank account change | Procedure |