01How it works
The fraudster takes over one party's mailbox or registers a look-alike domain, watches the thread, and at invoice time sends "our account changed, please pay this IBAN". Once paid, the money is usually gone.
02Warning signs
- Bank account, country or beneficiary name changing at the last minute
- A one-letter difference in the sender address (rn instead of m) or a different domain ending
- Urgency: "pay today or the shipment is cancelled"
- Pushback when you ask to confirm by phone
03Protection
Take bank details only from the contract and confirm any change by voice on a phone number you already had. A small test payment also helps.
On MİTA the bank details are part of the sealed contract. When a phone number, e-mail or IBAN is shared in messages, both sides see a warning; payment details changed off-platform leave no record in the contract.
This guide is general information, not legal or financial advice. Check the official text and your adviser for binding obligations.
