AI-Personalized Invoice Fraud Hits One Million Emails in Three Days
This is a DailyCyber.News update, brought to you by BareMetalCyber.com, for Sunday, September 13th, 2026.
Accounts payable teams are facing a form of fraud that combines mass distribution with convincing personalization. From August 3rd to August 5th, one campaign sent more than one million emails claiming that targeted companies owed just under fifty thousand dollars for an annual ServiceNow subscription. The invoices looked realistic, and the attackers added forged email threads that appeared to involve executives at the targeted organizations. They also used the real names of CEOs, CFOs and presidents. Evidence from the campaign suggested AI helped gather public information and customize the messages at speed.
The campaign crossed multiple industries, and eighty seven point seven percent of the recipient organizations were in the US. That scale matters because finance employees can no longer assume a personalized message required careful human research. Leaders should make sure payment controls account for polished executive impersonation produced in bulk. Defenders still need strong email authentication, spoof protection, filtering and fast reporting processes. The practical action is straightforward: require independent verification through a trusted channel before approving invoices or changing payment details.
For the sources and the full Daily Cyber newsletter, visit DailyCyber.News.
