info_outline
Inside the AP Fraud Bootcamp: Four Cases Worth Learning From
10/14/2026
Inside the AP Fraud Bootcamp: Four Cases Worth Learning From
In this episode, AP expert Debra Richardson joins host Grace Berube to review real, anonymous fraud cases submitted by attendees of the AP Fraud Bootcamp session and the lessons AP teams can take from them. Debra shares what the submissions revealed about the industries, systems, and vendor volumes involved, then walks through four cases: a bank change request where the confirmation call reached the wrong person, an attempted scheme built on a fake CEO message sent through WhatsApp, a $100,000 fraud avoided thanks to a successful confirmation call, and a $600,000 loss tied to a vendor self-registration portal. Along the way, Debra offers practical fixes, from scripted confirmation calls to treating portals as just another document delivery method, and reflects on what the session taught her about trust in the vendor process. WHAT YOU’LL LEARN IN THIS EPISODE What a crowd-sourced look at real fraud cases reveals about the industries, ERP systems, and company sizes being targeted, from 400 vendors to 70,000. Why a confirmation call is only as strong as the person you reach, and how a scripted call that asks for the last five digits of the existing bank account can authenticate the right contact. How a fraudster impersonating the CEO over WhatsApp tried to work through an internal team member, and why a request from the CEO is itself a red flag. Why the confirmation call is still worth the effort, illustrated by the case where it helped one team avoid a $100,000 fraud. How a vendor self-registration portal became the entry point for a $600,000 loss, and why portals should be treated as one more delivery method with the same controls in place.
/episode/index/show/app2ppodcast/id/43225728