AI-Assisted Executive Impersonation and Fake Invoices: Over 1 Million ACH Payment Fraud Emails
1. Overview Source : Protecting organizations from AI-assisted executive impersonation and invoice fraud Publisher : Microsoft Security Research Published Date : 2026-09-10 Updated Date : Not specified Severity : high Reason for Severity : A large-scale delivery of over 1 million emails combining executives, vendors, invoices, and email conversation history, with evidence of template generation…
Microsoft Research has identified over 1 million fraudulent emails targeting organizations. Attackers pose as company executives and vendors, sending fake invoices and requests to make ACH transfers. The emails incorporate the executive's name, branding, and conversation history to make the ruse appear legitimate. The goal is to prompt accounts payable staff to execute the money transfer.
While the emails may appear approved, the transfer does not happen automatically. Suspicious emails may lack proper sender domain authentication or show inconsistencies in email headers and forwarding. Organizations should implement multi-factor authentication, domain authentication, and require separate approvals for unusual transfers.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
