Payment-redirection scams involve which of the following?

Payment-redirection scams involve which of the following?

• A. Redirecting payments to an attacker’s account
• B. Stealing passwords through phishing emails
• C. Investing in a fake scheme
• D. Sending unsolicited charity requests

Answer: (A)

Payment-redirection scams are about moving funds away from the intended recipient by changing payment details so the money goes to an attacker-controlled account. The scenario fits best with redirecting payments to an attacker’s account because the core aim is to fool the payer into sending funds to the wrong recipient, often through altered invoices, compromised supplier information, or trusted-looking requests. Phishing to steal passwords isn’t about redirecting payments; it’s about gaining credentials. A fake investment scheme is a different fraud that centers on convincing someone to invest money, not on diverting a specific payment. Unsolicited charity requests are another scam type that seeks donations, not to alter the payment destination in a legitimate transaction. To guard against payment redirection, verify payment details through separate, verifiable channels and enforce strong controls around invoice and payment changes.

Payment-redirection scams are about moving funds away from the intended recipient by changing payment details so the money goes to an attacker-controlled account. The scenario fits best with redirecting payments to an attacker’s account because the core aim is to fool the payer into sending funds to the wrong recipient, often through altered invoices, compromised supplier information, or trusted-looking requests.

Phishing to steal passwords isn’t about redirecting payments; it’s about gaining credentials. A fake investment scheme is a different fraud that centers on convincing someone to invest money, not on diverting a specific payment. Unsolicited charity requests are another scam type that seeks donations, not to alter the payment destination in a legitimate transaction. To guard against payment redirection, verify payment details through separate, verifiable channels and enforce strong controls around invoice and payment changes.