Invoice-fraud research joins message evidence with payment verification

Findings and evidence

Microsoft investigates a large email campaign impersonating executives and a supplier, with fabricated invoices and indicators consistent with generative-AI-assisted template creation. The report examines message delivery and the financial narrative presented to recipients.

Why it matters

Preserve original messages with full headers, attachments and the payment-approval record. Verify a requested payment through an established independent channel and distinguish actual transaction outcomes from attempted fraud.

Scope and limits

Indicators of AI-assisted writing are not proof that every message was AI-generated. Campaign volume also differs from the number of recipients who paid.

Primary source

Microsoft Security: original publication. Source published 2026-09-10. Brief prepared by websec.gr on 26 September 2026. This is an editorial research summary, not a claim of independent replication.