Stop Payment Fraud Before a Busy Big Lake Event

A volunteer treasurer preparing for a Big Lake summer event receives an email: the sound-equipment vendor has changed banks, and payment must go out today. The message looks familiar, but the routing information is new. Paying immediately could send event funds to the wrong party. For organizations working with institutions such as First National Bank Alaska, a short approval routine can help staff distinguish an ordinary invoice from an unauthorized payment request. We recommend establishing that routine before seasonal activity intensifies.

Map the moment when money can leave

Event payments pass through several hands. Someone orders equipment, another person receives the invoice, an authorized signer releases money, and somebody later reconciles the statement. When those tasks all sit with one rushed volunteer, an altered invoice may go unchallenged.

Start by separating three payment routes. A paper check needs an accurate payee, amount, signature and issued-check record. An ACH transfer needs verified account details and controls over who can create or approve the instruction. Card purchases need a named cardholder, a spending limit and receipts matched to the approved purchase.

Map the actual workflow on a single sheet. Note who can view balances, enter payments and change vendor records. Expired access for former seasonal workers deserves attention before the next event. Our community organizations can adopt small-business cybersecurity controls such as unique accounts and access limited to assigned duties without building a complicated finance department.

Assign a second pair of eyes to changes

A two-person organization can still separate a request from its final release. The organizer confirms that a purchase is needed; the treasurer independently verifies any revised payment instructions before sending funds.

Role	Task	Evidence to retain
Requester	Confirms the purchase and invoice	Order or contract
Verifier	Checks changed payee or account information	Callback note
Approver	Authorizes the actual payment	Dated authorization
Reconciler	Matches bank activity to the decision	Statement reference

These are functional roles, not four required employees. One volunteer can request and reconcile while the other verifies and approves, provided no individual approves a payment change they introduced alone. For larger amounts, the organization can set its own written review threshold.

A practical rule is simple: whoever receives a vendor’s new bank details must not be the only person confirming them. Document the exception when a staff member is absent rather than quietly skipping verification.

Verify changes outside the email conversation

A fictional warning message might say: “Our old account is frozen. Send tonight’s booth-rental payment to this new account, or your booking will be canceled.” Urgency does not establish authenticity. Nor does a familiar signature block.

Pull the vendor’s number from a signed contract or another previously verified record. Call that number, ask whether payment instructions changed and record the name of the person who confirmed the change. Do not use the number supplied in the suspicious message. If nobody can verify the change, pause the transfer and contact the vendor through another established channel.

The FTC describes how fake invoices and impersonation attempts can pressure businesses into paying for unauthorized requests. Verify the purchase itself as carefully as the destination account. An invoice for an unfamiliar service should not enter the payment queue merely because it looks overdue.

Ask what your bank’s controls can check

First National Bank Alaska lists business tools including Positive Pay, ACH fraud-prevention controls and account-access administration. Positive Pay generally compares presented checks against an issued-check file and flags differences for review. ACH controls may screen debit activity against authorized parties or parameters. Alerts can bring an unusual entry to someone’s attention.

These features address different problems. A check-screening service will not necessarily identify an email that persuaded staff to authorize a fraudulent electronic transfer. An alert may arrive after a decision has already been made. Neither replaces an independent vendor callback.

Ask the financial institution which accounts qualify, who receives exceptions, what happens when nobody responds, and what fees or cutoff times apply. Confirm the current agreement directly. Event organizers can plan a branch conversation using banking access near Big Lake, but actual service capabilities belong to each institution.

Keep a payment decision log

Use one record that survives staff turnover. This hypothetical log demonstrates the minimum information for an event invoice.

Invoice	Details changed?	Verification	Approved by	Released
Tent rental 014	Yes	Called number on signed contract; pending confirmation	On hold	Not released

Keep the original request, the vendor’s confirmed instructions, any approval and the bank reference together. For a paper check, retain its number. For an electronic payment, keep the confirmation reference without copying account passwords into the file.

When a transaction appears wrong, stop further payments to that destination. Contact the financial institution immediately through a verified channel, preserve the records and ask about its dispute or recovery process. The available response depends on the payment type, circumstances and governing rules; reimbursement cannot be assumed.

Our role as the Big Lake Chamber is to encourage workable local controls. A brief pre-event rehearsal, with someone pretending to change an invoice, can reveal who actually has the power to release money. This is general operational education, not banking or legal advice. Check your organization’s authorization rules and your bank’s current terms before a real payment is due.