Loading article...
Slot ID: blog-post-top
My neighbour nearly lost £4,200 to a builder who didn't exist. The quote came by email, the bank details matched the invoice letterhead, and the firm's website looked sharper than most. What saved her was a phone call to a number she found herself instead of the one printed in the email. The man who answered went quiet, then hung up.
That near-miss captures something most security advice misses. The technology behind a secure money transfer is genuinely good now: encryption, device binding, fraud models that flag a payment before it leaves your account. None of it helps if you authorise the payment yourself after being talked into it.
Four things decide it, and only one of them involves cryptography.
Who holds the money in between. On a typical international transfer, your cash sits with the provider before it reaches the recipient. Regulated firms must keep client funds in segregated accounts, separate from their own operating money. Ask what happens to your funds if the provider goes bust mid-transfer. A vague answer is your answer.
Who supervises them. In the UK that means FCA authorisation or registration as an authorised payment institution or e-money institution. In the US, a state money transmitter licence plus FinCEN registration. In the EU, a licence from the home regulator that carries passporting rights across member states.
How the recipient is verified. Confirmation of Payee in the UK, IBAN name checks across Europe, account name matching elsewhere. Weak name matching is exactly how invoice fraud gets through.
What recourse you have. Card payments over £100 and under £30,000 in the UK carry Section 75 liability, so the card issuer shares responsibility. Bank transfers don't. That single difference should change how much you trust a payee you've never dealt with.
Authorised push payment fraud, where you send money willingly to a fraudster, cost UK victims over £400 million in a single year. The money isn't stolen. It's handed over. Encryption never touches it.
Conveyancing and invoice fraud top the list: a genuine email thread, then a follow-up with new bank details and a plausible excuse about an audit or a change of accountant. Also common are the "safe account" call from someone claiming to be your bank's fraud team, marketplace deposits on goods that don't exist, and investment platforms with a working dashboard right up until withdrawal day.
The tell is almost always the same. Someone is manufacturing urgency and asking you to move money to new details. Legitimate firms change bank details by letter or in-app notification, not by a rushed email at 4:50pm on a Friday.
A rate that beats the high street by two percent is worth nothing if the firm handling it isn't authorised. Regulator registers are public and searchable, and the check takes about ninety seconds. Search the exact trading name, not the parent company and not the brand on the app, then confirm the permissions listed actually include payment services or e-money.
Two details worth knowing. E-money institutions aren't banks, so balances usually aren't covered by deposit insurance like the £85,000 FSCS guarantee; they're protected by safeguarding rules instead, which is a different promise. And cloned websites exist, so navigate to the firm from the register rather than from an advert.
Cost matters too, but read it properly. A cheap international money transfer is one where the total you pay, fee plus the margin buried in the exchange rate, is genuinely lower. Not one where the fee is zero and the rate quietly does the work.
Instant rails such as Faster Payments, SEPA Instant, UPI and FedNow settle in seconds and cannot be pulled back once they land. That's the trade you're making: convenience in exchange for irreversibility. Knowing how fast an instant money transfer really is, and where the cost hides, helps you decide when speed is worth paying for and when a slower, cheaper route is the smarter call.
For a first payment to an unfamiliar supplier, slower is usually better. For a monthly payment to family abroad on a route you've used twenty times, instant is fine.
The channel matters as much as the provider. A card payment gives you a chargeback route if goods never arrive. A bank transfer gives you a recall request and a sympathetic case handler. An app transfer through a licensed provider sits somewhere in between, with in-app name verification on many corridors as a bonus.
Cost creeps in quietly across all three. The gap between a 0.4% and a 3% total cost compounds fast on regular payments, and online transfers are where the padding is easiest to hide behind a headline fee.
Fees dressed up as protection deserve particular scrutiny. It pays to know where the real cost of a low-fee money transfer hides, because the security-relevant part of a transfer is licensing and name verification, not a £2.99 "priority" surcharge.
Act fast and in the right order. Call your bank's fraud line, not the general number, and ask them to raise an urgent recall with the receiving bank. Report it to the national fraud body in your country; in the UK that's Action Fraud, in the US the FTC. Preserve everything: emails, full headers, chat logs, account numbers. Then contact the receiving bank directly if you can identify it, since recalls move faster when both ends push.
Recovery rates are poor but not zero. Money that hasn't yet been withdrawn from the receiving account has a real chance of coming back, and that window is measured in hours rather than days.
Security isn't a product you buy once. It's a set of small defaults you eventually stop thinking about. Save trusted payees and never edit them from a link in an email. Keep a separate account for large transfers so your day-to-day balance isn't exposed. Read your statements, because most fraud is spotted by the victim before the bank's models catch it. And when someone creates urgency around money, treat the urgency as the warning sign rather than the reason to hurry.
The recipient's security matters as much as yours. If you're sending to a small business or an individual abroad, ask whether their account details have changed recently, and confirm through a channel that isn't email. Half the invoice fraud stories I've heard ended at a two-minute phone call to a number someone looked up themselves. That's still the cheapest security feature on the market, and it costs nothing in fees.
Slot ID: blog-post-bottom