Blog Details

<p>Interpol is strengthening an international system designed to stop fraudulent payments before cybercriminals can withdraw, convert, or redistribute the stolen funds. The Global Rapid Intervention of Payments mechanism, known as I-GRIP, connects law enforcement agencies with financial institutions so urgent stop-payment requests can cross national borders quickly.</p><p>The system recently helped authorities in Singapore and Oman halt a $6.6 million payment associated with a business email compromise attack. The intervention formed part of Operation First Light 2026, an international campaign that also led authorities to block more than 31,000 bank accounts linked to fraud.</p><h2>Speed Is the Deciding Factor</h2><p>Business email compromise frequently succeeds without deploying malware. Criminals may impersonate an executive, supplier, lawyer, or finance employee and persuade a victim to transfer money to an account under their control. The funds can then be divided among multiple accounts and moved through several jurisdictions within minutes.</p><p>I-GRIP connects Interpol's National Central Bureaus in 196 countries with local and international financial organizations. Its purpose is to reduce the delay between a victim reporting fraud and the receiving institution freezing the transaction.</p><p>The approach has previously demonstrated its value. In 2024, coordination between Singapore and Timor-Leste helped intercept approximately $40 million after an investment company received fraudulent instructions to change a supplier's bank details. The funds were stopped even though the incident was reported several days after the transfer began.</p><h2>Cryptocurrency Remains a Difficult Frontier</h2><p>Traditional bank transfers can sometimes be recalled or frozen through cooperating institutions. Cryptocurrency is more difficult because transactions are fast, irreversible, and capable of moving through exchanges, mixers, and multiple assets. Interpol therefore wants to extend rapid fraud alerts to virtual asset service providers and cryptocurrency exchanges.</p><p>In my view, I-GRIP represents a necessary shift from investigating cyber fraud after the money disappears to treating payment recovery as an immediate incident-response function.</p><h3>What Organizations Should Do</h3><ul><li>Require independent verification for changes to supplier payment details.</li><li>Use two-person approval for high-value and international transfers.</li><li>Maintain emergency contact details for banks, insurers, legal counsel, and law enforcement.</li><li>Report suspected fraud immediately rather than waiting for an internal investigation to finish.</li><li>Preserve email headers, payment instructions, account details, and communication records.</li></ul><p>I believe organizations should rehearse financial fraud response just as they rehearse ransomware recovery. A delayed report may turn a recoverable transfer into a permanent loss, while a prepared finance and security team can give banks and investigators the time needed to intervene.</p>