The VerifyTheCall Blog
Research and practical guides on voice fraud, payment controls, and verification — written for controllers, CFOs, and internal audit.
Vishing & Voice Fraud
What Is Vishing? Definition, Examples & How to Stop It
Vishing — short for voice phishing — is a social engineering attack conducted over a phone or voice call, in which an attacker imp…
Deepfake Detection
AI Voice Detectors: How Voice Clone Detection Actually Works
An AI voice detector analyzes speech audio to estimate whether it was produced by a human or generated by a voice-synthesis model.…
Identity Verification
Liveness Detection: How It Works and Why Voice Needs It Too
Liveness detection is a set of techniques that verify a biometric sample — a face, a voice — comes from a live, physically present…
Wire & Payment Fraud
How to Prevent Wire Transfer Fraud: A Controller's Checklist
Wire transfer fraud is uniquely unforgiving: unlike card payments, wires have no chargeback mechanism, and recovery odds collapse…
Wire & Payment Fraud
How to Detect Invoice Fraud Before You Pay
Invoice fraud succeeds by hiding inside a process built for speed. Accounts payable exists to pay legitimate invoices quickly; att…
Compliance & Controls
Call Verification Methods Compared
Call verification is the practice of confirming that the person on a call is who they claim to be before acting on their request.…
Compliance & Controls
Building a Payment Approval Process That Actually Stops Fraud
A payment approval process defines who may initiate, approve, and release payments, under what conditions, with what verification.…
Deepfake Detection
How to Tell If an Image Is AI-Generated
Image generators have crossed the threshold where casual inspection fails. But “impossible to spot casually” is not “impossible to spot” — a structured check still catches most fakes…
Deepfake Detection
The Arup Deepfake: Anatomy of a $25 Million Video-Call Fraud
A finance employee joined a video call with the CFO and colleagues. Every other participant was a deepfake.
Compliance & Controls
The Best Vishing Simulation & Training Tools in 2026
A neutral, alphabetical look at the platforms that test your staff against voice-phishing — and what a good program actually measures.
Vishing & Voice Fraud
Vishing Attacks: How They Work and How Companies Stop Them
A vishing attack is a targeted campaign against an organization — not an opportunistic scam call. Here are its four stages.
Wire & Payment Fraud
Real Estate Wire Fraud: How It Happens and Who Is Liable
Large one-time transfers, deadline pressure, and first-time wirers make closings the perfect wire-fraud environment.
Vishing & Voice Fraud
What Is Scattered Spider? The Helpdesk Vishing Playbook, Explained
Scattered Spider became infamous for breaching major companies not through exploits, but through phone calls to the IT helpdesk.
Deepfake Detection
Deepfake Job Interviews: How Fake Candidates Beat Remote Hiring
Remote hiring quietly removed every moment where identity used to confirm itself. Into that gap moved an ecosystem of candidate fraud.
Fraud Response
Wire Fraud: What to Do in the First 48 Hours
The exact sequence for the first 48 hours after a fraudulent wire — bank recall, IC3 filing, evidence preservation, insurers.
Fraud Response
What Is IC3 — and What Actually Happens After You File?
What the FBI's Internet Crime Complaint Center does with your complaint, how the Recovery Asset Team freezes wires, and how to file well.
Fraud Response
How to Recall a Wire Transfer — and How Long You Actually Have
How recall requests actually work, the realistic timeline, and the three requests to make to your bank in a single call.
Fraud Response
Is the Bank Liable for Business Wire Fraud?
Why UCC Article 4A usually leaves business wire losses with the company — and the practical script for talking to your bank.
Fraud Response
Are Scam Recovery Services Legitimate?
The recovery-scam playbook, the free channels that actually work, and what to do if you already paid a recovery service.
Fraud Response
Business Email Compromise Response: The First-Week Playbook
Two clocks run at once after a mailbox compromise — the money clock and the access clock. The first-week sequence for both.