Invoice Fraud

Invoice fraud is a scheme in which criminals send fake or altered invoices, or impersonate suppliers and executives, to trick a company into paying money to the wrong account. Generative AI has made these attacks far more convincing, since tools can now produce polished invoices, mimic a vendor's writing style, or clone a real executive's voice for a payment approval call. For enterprise AI governance teams, this matters because it exposes weaknesses in accounts payable controls, and it raises questions about how AI-assisted document processing and payment workflows should be verified before money moves.

1 item

ResearchGlobal2026-11-02

Live Invoice Fraud Campaign Hides Commands That Hijack Email AI Agents

Security vendor Sublime Security documented an active invoice fraud campaign embedding hidden instructions inside emails using invisible Unicode characters. The technique targets AI agents that read and act on email, redirecting them to follow attacker commands instead of legitimate user instructions. Enterprises running AI-connected email workflows face immediate prompt injection and financial fraud risk.

prompt injection invoice fraud email agents agentic AI Sublime Security financial controls Unicode obfuscation