{
  "id": 3683001,
  "title": "Malawi’s State Oil Company Wired US$403,605 to a Stranger",
  "url": "https://urgent.news/2026/08/27/malawis-state-oil-company-wired-us-403-605-to-a-stranger",
  "topic": "world",
  "section": "World",
  "published": "2026-08-27T06:21:11.000Z",
  "source": {
    "name": "The Rio Times",
    "slug": "the-rio-times",
    "url": "https://www.riotimesonline.com/malawi-nocma-email-fraud-fuel-payment-2026/"
  },
  "original_language": "en",
  "account": "Malawi's state oil company, NOCMA, has admitted to transferring US$403,605 to an account controlled by fraudsters due to forged emails. These emails impersonated a fuel supplier, Mozhandling Limited, and altered the supplier's bank details at a major US bank. The incident only came to light after the legitimate supplier inquired about the missing payment, two weeks after the transfer was initiated on 29 April 2026. The money was wired to an account held by a company with a name strikingly similar to the genuine supplier, at the National Bank of Malawi. Police have since arrested the company's deputy chief executive and senior operations manager, though recovery of the stolen funds has not yet been reported. Security experts warn that business email compromise (BEC) attacks are becoming increasingly common, exploiting email correspondence between organizations to defraud companies of funds. The case highlights the importance of verifying bank details through secure channels, even when dealing with trusted suppliers.",
  "summary": "A forged email changed the bank details on a fuel-handling invoice. NOCMA paid, and only found out weeks later when the real supplier called. The post Malawi’s State Oil Company Wired US$403,605 to a Stranger appeared first on The Rio Times .",
  "key_points": [
    "Malawi's state oil company NOCMA wired US$403,605 to a fraudster's account.",
    "Emails impersonating fuel supplier Mozhandling Limited altered bank details.",
    "Police arrested company's deputy CEO and senior operations manager."
  ],
  "editors_take": "The incident highlights that even organizations dealing with trusted suppliers can fall victim to business email compromise attacks if they don't verify bank details through secure channels.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}