Banking
Four fraud patterns worth recognising
Most account compromise begins with a convincing message rather than a technical breach. Recognising the pattern is the strongest defence available.
Upstate Corporate Security Team · February 24, 2026 · 6 min read
Fraud attempts overwhelmingly rely on urgency and authority. A message claims something is wrong, insists it must be resolved immediately, and offers a convenient way to do so.
Recognising that structure matters more than recognising any individual scam, because the surface details change constantly.
The patterns
Impersonation: contact claiming to be your bank, asking you to confirm credentials or move money to a safe account. No legitimate bank asks for this.
Payment redirection: an invoice or supplier email with altered bank details. Verify changes by phone using a number you already hold.
Investment pressure: guaranteed returns with a deadline. Guarantees of return are a defining feature of fraud, not of investing.
Remote access: a request to install software so someone can help. Access granted is access abused.
What to do
Stop, then verify independently. Contact your bank through the app or a number you already have, never a link or number supplied in the message.
Enable multi-factor authentication and login alerts so unexpected access is visible immediately.
This article is general financial education, not personal advice. Consider your own circumstances, and seek regulated advice where a decision is significant.
Put it into practice
Speak to our team, or model the numbers first with our calculators.