What details must I give law enforcement after a fraudulent wire?
FinCEN lists nine details required when the complaint is filed: the account name and number on both sides, both banks, the country of each bank's branch, a summary of the fraud, the date of the wire, and the currency and amount.
Last read from the sources at the foot of this page.
Which details are required?
The following information is required to be provided at the time of filing a complaint with law enforcement:
- Your account name and number.
- The receiving account's name and number.
- Your bank's name.
- The receiving bank's name.
- The country of your bank's branch that sent the payment.
- The country of the receiving bank's branch.
- A summary of the fraud.
- The date of the wire.
- The currency and the amount.
What else helps?
Your bank can give you that reference. FinCEN also asks for as much detail about the scheme as possible: keep the emails and the instructions as they arrived.
Society for Worldwide Interbank Financial Telecommunication (SWIFT) payment reference code from the victim bank
What can an outside reading tell you after a payment fraud?
An outside reading cannot see your mailboxes, so it cannot tell you whether someone signed in to one.
It can show three things that bear on how a fraud like this reaches a firm: whether your DMARC record tells mail servers to refuse mail forged in your name, which look-alike domains of yours are registered, and which addresses at your domain are listed in breach data from other services.
Where does this come from?
- FinCEN, Rapid Response Program fact sheet (April 15, 2026)fincen.govRead 14 October 2026
See what is open before anyone else does.
We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.
- We read your firm from outside.
- You see what is open, with the proof for the lead finding.
- If it is worth it, you order.
What happens if you go ahead. More at getleaktrace.com/see-it-first/.
Read the transcript
- 72 hours. One domain. Nothing to install.
- Discover. Every way in, found from outside.
- Validate. Every finding, proven. Dated and checkable by anyone.
- Close. Forged email: one click per step, where we reach your DNS host and you approve it.
- You get the fix for the rest, step by step, and we re-check until it is closed.
- Monitor. On monitoring: email settings, look-alikes and new host names re-checked every hour. Alerts within the hour.
- Every paid assessment is human-verified before release.
- The AI defense layer for businesses. getleaktrace.com/see-it-first/