An employee changes bank details by email
Complete plan
"I've changed banks, here are my new details." Two variants of salary-diversion fraud, and three reflexes: confirm through a known channel, delay by one payroll, tell the employee.
- 2 min
- 3-question check
- English · Français
- Attestation
You will be able to
- Recognise the two variants of salary-diversion fraud: a fake employee emailing, and a hijacked real HR-portal account
- Confirm any bank-detail change through a known channel before the next payroll, and delay its effect if doubt remains
- Tell the employee on their usual contact details every time bank details change
The module
2 min-
An employee changes bank details by email 2 min
-
Knowledge check
3 questions, pass mark 80 %. Explanations after each answer; you can try again.
-
Attestation
One per person, with the date, the score and the frameworks covered — anyone can check it online with its code.
Sources
- Microsoft Threat Intelligence, « Investigating targeted payroll pirate attacks affecting US universities » (9 octobre 2025) : accès au système RH, changement des coordonnées bancaires, règles de messagerie pour masquer les alertes
- FBI IC3, alerte I-091818-PSA (18 septembre 2018) : détournement de paie après vol des identifiants du portail salarié
- Cybermalveillance.gouv.fr, fiche réflexe « Que faire en cas de fraude au virement ou au faux RIB » (variante : usurpation d'un salarié pour changer le compte de versement du salaire)
Version 1 · updated October 5, 2026