Treasury Teams Have Faced Escalating Payment Fraud

Deepfake-enabled attacks and weak internal verification have left 76% of organizations vulnerable to payment fraud.

Updated on Oct. 1, 2026 in Cybersecurity

Bold flat-color editorial illustration of an ajar steel vault door emitting a golden light, representing institutional security risks.
The 2026 Treasury Dragons Payment Fraud Index reports that 76% of treasury departments faced fraud, as AI-enabled attacks bypass traditional security protocols. AI Illustration. Upload story photo >

Live Poll

Do you trust that your organization's digital security measures are effectively protected against AI-driven fraud?

The 2026 Treasury Dragons Payment Fraud Index reveals that 76% of treasury departments experienced at least one payment fraud incident in the past year, with over half reporting deepfake-related attempts. This study of 104 treasury professionals highlights a significant gap between institutional confidence and actual verification security.

Why it matters

The rise of AI-driven fraud has outpaced traditional internal controls, creating a high-stakes environment where sensitive financial data is often still handled over insecure email channels. Organizations are now shifting focus toward robust payment validation as standard verification processes prove insufficient against sophisticated multi-channel attacks.

While 53% of respondents faced deepfake-related fraud, only 18% of organizations perform continuous revalidation of supplier bank details. Furthermore, 41% of treasury teams still receive sensitive payment information via standard email rather than encrypted, secure channels.

The players

Treasury Dragons

An industry research organization based in London that monitors corporate treasury trends and financial fraud risks.

The details

Fraudsters are increasingly using AI to orchestrate multi-channel attacks, combining standard email phishing threads with voice, video, or messaging interactions to add false credibility. These methods allow attackers to execute fraud faster and at a lower cost than manual social engineering. The data suggests that despite the threat, only 39% of treasury departments maintain clearly defined ownership for fraud prevention, leaving many organizations without the protocols needed to intercept AI-generated impersonations.

Timeline

  1. The 2026 Treasury Dragons Payment Fraud Index was released on October 1, 2026.

The Tech Race

The findings underscore a widening gap between the defensive capabilities of internal financial controls and the AI-augmented methods employed by modern fraudsters. As organizations scramble to implement stricter validation, the speed at which threat actors adopt generative AI remains the primary challenge in this ongoing security race.

Treasury professionals should expect an increased organizational push toward adopting dedicated payment fraud prevention systems, as 71% of respondents now prioritize this investment. Until automated validation is standardized, security teams must move sensitive payment data away from email threads toward encrypted communication channels.

The takeaway

Organizations should prioritize the transition to continuous supplier bank detail revalidation to mitigate the risks posed by AI impersonation. Analysts should track the 71% of firms currently prioritizing payment validation to see how rapidly these new defensive investments actually reduce incident rates over the next twelve months.

Further reading

For more on the evolving threat landscape in financial systems, visit our Cybersecurity section.

Live Poll

Do you trust that your organization's digital security measures are effectively protected against AI-driven fraud?