VentWire Case VW-003
Someone changed the bank account details right before a wire went out.
A one-letter spoofed domain and new IBAN appeared before wire release. Separate-channel verification stopped the payment.
CASE REFVW-CASE-003
OBSERVED2026 - spoofed domain and new IBAN appeared before wire release
CORRIDORPK to US
SECTORTrade Finance
VECTORPayment
MECHANISMSpoofed domain and substituted beneficiary instructions appeared immediately before payment.
IMPACTSeparate-channel verification stopped the payment.
INFERRED · SIGNALBeneficiary substitution attempts cluster before payment dates on this corridor.
ACTION · EXPOSURECall the beneficiary directly on a separate channel before releasing any wire.
A one-letter spoofed domain and new IBAN appeared before wire release. Separate-channel verification stopped the payment.
Observed facts are drawn from the reviewed case record. Signals and actions are operational interpretations, not legal conclusions.