Encyphir Risk Management
7 min read

Wire Fraud and Bank Fraud: What They Are and How They're Prosecuted

Craig Biggs
Craig BiggsFounder & CEO
January 7, 2025
Wire Fraud and Bank Fraud: What They Are and How They're Prosecuted

Table of contents

What Wire Fraud IsBusiness Email Compromise and Wire FraudWhat Bank Fraud IsSuspicious Activity ReportsForensic Accounting in Wire and Bank Fraud CasesHow Federal Prosecutors Build Wire and Bank Fraud CasesCivil Exposure and Parallel ProceedingsRed Flags and Prevention for OrganizationsWhen to Bring in Outside Investigators

Categories

Forensic AccountingCorporate Investigations

Wire fraud and bank fraud are among the most commonly charged federal financial crimes in the United States. They are broad statutes that apply to a wide range of schemes, and they carry significant prison sentences. Understanding what these laws cover matters for anyone involved in financial investigations, civil litigation with a criminal dimension, or compliance and risk management.

What Wire Fraud Is

The federal wire fraud statute, 18 U.S.C. Section 1343, makes it a crime to use wire communications to execute a scheme to defraud someone of money or property. Wire communications include telephone, email, text messages, and internet transmissions. The elements are:

  • A scheme to defraud
  • Use of wire communications in furtherance of the scheme
  • Intent to defraud

The breadth of the wire fraud statute is its defining characteristic. Nearly every modern financial fraud involves some use of electronic communication. That means wire fraud charges can accompany almost any other financial crime. Securities fraud, business email compromise, investment scams, and vendor payment fraud all typically involve wire fraud charges alongside other counts.

Penalties. Wire fraud carries up to 20 years in federal prison per count. When the scheme involves financial institutions or is connected to a federally declared disaster or emergency, the maximum increases to 30 years. Each use of a wire communication in furtherance of the scheme can be a separate count. That is why wire fraud indictments often include multiple counts reflecting numerous emails, transfers, or communications.

Business Email Compromise and Wire Fraud

Business email compromise (BEC) is one of the most damaging and prevalent wire fraud schemes. It typically involves impersonating a trusted party to induce a victim to make a fraudulent wire transfer. The trusted party may be an executive, vendor, or attorney. Common variations include:

  • An attacker compromises or spoofs an executive's email account and instructs the finance department to make an urgent wire transfer to a new account.
  • A vendor's email account is compromised, and the attacker sends a payment instruction update to the client company, redirecting future payments to a fraudulent account.
  • An attorney email is impersonated during a real estate transaction to divert the closing wire to a fraudulent account.

BEC losses run into billions of dollars annually. The FBI's Internet Crime Complaint Center (IC3) consistently ranks BEC as the highest-loss category of internet crime.

What Bank Fraud Is

The federal bank fraud statute, 18 U.S.C. Section 1344, makes it a crime to knowingly execute a scheme to defraud a financial institution. It also covers schemes to get money or property from a financial institution by false or fraudulent pretenses. The key element is that the scheme targets or involves a federally insured financial institution.

Common bank fraud schemes include:

  • Check fraud, including check kiting and the use of counterfeit or altered checks.
  • Loan application fraud, submitting false financial information, falsified documents, or misrepresented asset values to get loans.
  • Account takeover fraud, using stolen credentials or identity information to access and drain accounts.
  • Mortgage fraud, including falsified income documentation, inflated appraisals, and straw buyer schemes.

Penalties. Bank fraud carries up to 30 years in federal prison per count, plus fines up to $1 million per count.

Suspicious Activity Reports

Financial institutions must file Suspicious Activity Reports (SARs) with the Financial Crimes Enforcement Network (FinCEN) when they identify transactions that may involve money laundering, fraud, or other financial crimes. SAR filings are confidential, and their existence cannot be disclosed to the subject of the report.

SARs are a primary intelligence tool for federal law enforcement investigating financial crimes. Several patterns can trigger SAR filings:

  • Unusual patterns of transactions
  • Large cash deposits
  • Structuring transactions to avoid reporting thresholds
  • Transactions inconsistent with a customer's known business activity

Forensic Accounting in Wire and Bank Fraud Cases

Financial forensics is central to both the prosecution and defense of wire and bank fraud cases. Prosecutors rely on forensic accountants to trace funds, document the fraud scheme, quantify losses, and present complex financial evidence in terms a jury can understand.

On the defense side, forensic accountants check the government's analysis, find flaws in methodology, and quantify alternative explanations for the financial activity at issue.

Civil litigants whose organizations have been victimized by wire fraud use forensic accounting to document losses for recovery through civil litigation and insurance claims.

Our CFE-credentialed investigators and forensic accounting team support financial crime investigations, civil litigation arising from wire and bank fraud, and compliance assessments designed to reduce organizational vulnerability to these schemes. Corporate clients retain us for internal investigations and SAR-adjacent response. Our executive misconduct investigations team takes the lead when senior management is implicated. Contact us for a confidential consultation.

How Federal Prosecutors Build Wire and Bank Fraud Cases

Federal wire and bank fraud prosecutions typically begin well before an indictment is unsealed. The U.S. Attorney's Office works with the FBI, the U.S. Postal Inspection Service, IRS Criminal Investigation, or the Secret Service. They will often spend months or years assembling evidence through grand jury subpoenas. Those subpoenas are directed at banks, payment processors, email providers, and cloud storage services. Financial institutions are frequent sources of early intelligence, and SAR filings routinely seed investigations that eventually produce charges.

Prosecutors build these cases around a core narrative of deception. They layer the documentary evidence to show both the scheme and the defendant's knowledge of it. Wire transfer records, SWIFT messages, email headers, chat logs, login metadata, and accounting entries are all used to construct a timeline. In BEC cases, investigators trace the path of the funds through correspondent banks and money mule accounts. They often work with foreign counterparts to follow transfers that leave the United States within hours of the initial wire. When the first receiving account is drained quickly, the case can expand to include charges against unwitting or complicit intermediaries under money laundering and conspiracy statutes.

Cooperating witnesses are another staple of these prosecutions. Lower-level participants such as bookkeepers, controllers, or junior executives are frequently offered plea deals in exchange for testimony against principals. Defense counsel and the organizations swept up in these investigations benefit from engaging independent investigators early. Our digital forensics team can preserve email evidence, authenticate communications, and reconstruct user activity. That work either supports a defense theory or positions an organization cooperatively with investigators.

Civil Exposure and Parallel Proceedings

Criminal charges are only one dimension of wire and bank fraud exposure. Victim organizations routinely pursue civil actions under several theories:

  • Racketeer Influenced and Corrupt Organizations Act (RICO)
  • Common law fraud
  • Breach of fiduciary duty
  • Conversion

Banks themselves may face regulatory scrutiny from the Office of the Comptroller of the Currency, the Federal Reserve, or state banking regulators. That happens when their controls fail to detect or prevent the scheme. Companies victimized by BEC sometimes sue their own financial institutions, their vendors, or their cyber insurers. These suits often arise when coverage disputes arise over whether a loss was a "computer fraud" or a "funds transfer fraud" under the policy language.

Parallel civil and criminal proceedings create strategic complexity. A defendant asserting Fifth Amendment rights in a criminal case may face adverse inferences in related civil litigation. Civil discovery can produce admissions that later surface in a criminal trial. Law firms handling these matters often bring in outside investigators to conduct witness interviews, locate transferred assets, and perform due diligence on counterparties before filing suit or negotiating settlement. Our law firm clients use these engagements to build the evidentiary record needed for both tracks.

Red Flags and Prevention for Organizations

Many wire and bank fraud losses are preventable with basic controls. Yet organizations continue to be victimized because attackers exploit workflow gaps rather than technical vulnerabilities. Finance teams should treat any change in payment instructions as a high-risk event. That includes requests to move funds to new accounts or different banks. Verification should happen out-of-band, using phone numbers from the vendor master file rather than numbers included in the suspect email. Urgency, secrecy, and appeals to executive authority are classic social engineering indicators. A request from the CEO to wire funds quickly and without involving the usual approvers is almost always fraudulent in a well-run organization.

Segregation of duties is another foundational control. The person who initiates a wire should not be the same person who approves it. Neither should have unilateral authority to add new vendors or modify banking details. Dual-channel confirmation continues to be the single most effective defense against BEC. That means verifying a wire instruction received by email through a phone call to a pre-established contact. Organizations should also monitor login patterns on email accounts, particularly for finance and executive users. They should disable auto-forwarding rules that attackers commonly create to conceal their activity.

Vendor onboarding and periodic vendor review processes matter as well. A fabricated vendor entity can be used to route payments from within the organization. We have worked matters in which insiders set up shell vendors and approved invoices to themselves over years. Several controls reduce this exposure:

  • Background work on new vendors
  • Periodic re-verification of banking details
  • Random audits of vendor activity

Employee-level screening through comprehensive background investigations for finance, treasury, and executive roles is a proportionate response given the scale of losses these positions can produce.

When to Bring in Outside Investigators

Organizations often hesitate to involve outside investigators after a suspected fraud, fearing cost or disruption. In practice, delay is the most expensive response. Wire recall requests have a narrow window of effectiveness, frequently measured in hours. The forensic value of email and endpoint evidence degrades quickly as systems are used, logs roll over, and attackers cover their tracks. The first forty-eight hours after a suspected BEC or insider fraud generally determine how much can be recovered and how defensible the eventual civil or criminal case will be.

Outside investigators bring independence that internal teams cannot provide. That matters most when the suspected actor is a senior employee or when the fraud touches multiple departments. Independence matters to regulators, to insurers evaluating a claim, and to courts assessing the credibility of findings. It also protects the investigation from the political pressures that can distort internal inquiries. When the matter involves potential executive misconduct, board audit committees routinely require that investigators report outside the normal management chain. Our engagements are structured accordingly.

Encyphir's forensic accountants, CFEs, and digital forensic examiners work in coordinated teams on wire and bank fraud matters. Engagements include rapid-response loss recovery, multi-month internal investigations, and support to defense counsel in federal prosecutions. To discuss