A customer recently settled an invoice from an artisan using a RIB (a French bank account number) received by email just before the school year began. A few days later, the customer’s bank informed them that the transfer had already been processed and that no automatic refund would be issued. The bank’s policy is that once a transfer is validated, it is considered final, regardless of the amount or the circumstances. This situation highlights a growing cybercrime trend where fraudsters intercept emails containing invoices and replace the supplier’s RIB with their own, making the documents appear legitimate. Cybercriminals exploit the trust between customers and suppliers by intercepting emails and altering bank details. These fake invoices often include the correct logo, file number, and exact amount, making them difficult to detect. Victims are usually targeted during routine transactions, especially when payments are made by email. The fraud relies on the victim’s lack of verification before sending the money. Once a transfer is made to a fake RIB, it is legally considered authorized, even if the details were altered by scammers. Artisans and small businesses are particularly vulnerable to this type of fraud. They often handle their own finances without professional accounting support, making them easy targets. In the first half of 2025, fraudulent transfers in France totaled around 618 million euros, an increase of 7% compared to 2024, with nearly 3.7 million fraudulent transactions. The key to preventing such fraud is simple: always verify any change in bank details by phone, using a known contact number, not the one provided in the email. If a fraudulent transfer has already occurred, victims should act quickly. Contacting the bank immediately is crucial, as it may help freeze the funds before they are transferred to the scammers. A report should also be filed with the police, gendarmerie, or national cybersecurity services, and the incident should be documented on the official platform cybermalveillance.gouv.fr. However, there is no guarantee of a refund, and the outcome depends on various factors, including the time of the report and the bank’s policies. Additionally, the victim remains legally obligated to pay the real supplier, even after having sent money to the scammer. This can lead to a double dispute, as the real creditor will still expect payment. The legal system increasingly recognizes the complexity of these scams, but the burden of proof often remains with the victim.