Six Cross-Border Scams to Watch for During 2026

Most fraud advice is written for someone banking in one country, in one currency, with one provider. Cross-border banking breaks the assumptions that advice rests on. Your money moves between institutions that cannot see each other's records. Unfamiliar payment requests are normal rather than suspicious. Delays are routine, so a fabricated delay does not stand out. And when something goes wrong, it is genuinely unclear which regulator, in which country, you are supposed to call.

Fraudsters know all of this. These are the six patterns that exploit it, what each one actually looks like from the inside, and the single question that defeats each.

1. The account-opening agent

You are told you can be approved for an account in a country that has already refused you, by someone who knows the process, for a fee paid up front. Sometimes the pitch is a "banking consultant"; sometimes it is a broker on a forum who has helped hundreds of people just like you.

What actually happens is one of three things. Nothing at all, and the fee is gone. Or an application is filed in your name containing statements you did not make and cannot support, which is a false declaration you personally carry. Or, worst, your documents are now in the hands of someone who has your passport scan, your address, your selfie and your tax number.

The defeating question: who is regulated here, and for what? A genuine introducer is authorised and will say so on a public register you find yourself. Nobody can sell you eligibility that the provider's licence does not allow. If a country's rules exclude you, no fee changes that — as our guide to opening an account as a non-resident explains, that is a licensing fact, not a negotiation.

2. The safe-account transfer

You are contacted by someone presenting as your bank's fraud team. They already know things about you — a recent transaction, the last four digits, your name and address. They tell you your account is compromised and money must be moved immediately to a "safe account" they have opened in your name.

There is no such thing as a safe account. Banks do not open one for you and they do not ask you to move money to protect it. The reason this scam works is the identifying details, which are usually from a data breach and prove nothing at all.

Cross-border variant: the caller claims to be a foreign regulator or a correspondent bank in the payment chain, which sounds plausible precisely because a genuine international transfer really does pass through institutions you have never heard of.

The defeating question: none, over that channel. Hang up. Call the number printed on your own card, from a different phone if you can, and wait a couple of minutes before dialling so the line has actually cleared.

3. Invoice redirection

A supplier you genuinely work with emails to say their banking details have changed. New IBAN, new country, same letterhead, same signature block, often the same thread you have been replying to for months. The invoice is real. The account is not.

This is the most expensive fraud on this list for anyone getting paid internationally, because it targets a payment you were always going to make, in an amount you were expecting, to a party you know. Nothing about it looks wrong. The mailbox was compromised, or a lookalike domain was registered with one character altered.

The defeating question: does this bank change survive a phone call to a number I already had? Never a number in the email. Never a reply to the thread. Any change of payment details is verified out of band, every time, for every amount. If you invoice internationally, our guide on getting paid by international clients covers building the payment details into the relationship from the start.

4. The money-mule job offer

You are offered flexible remote work: payments will arrive in your account, you forward them on, you keep a percentage. It is sometimes dressed as a payment-processing role, sometimes as a currency-exchange side business, sometimes as helping a company that "cannot yet open an account in your country".

The money is stolen, and you are laundering it. Being deceived is not always a defence, the account gets frozen and closed, and in many jurisdictions the closure is reported in a way that makes opening another account difficult for years. Students and new arrivals are targeted hardest, precisely because a legitimate reason to receive foreign payments is plausible for them.

The defeating question: why does a real company need my personal account? A business that can employ you can be paid directly. The whole structure only exists because the money must not touch a regulated entity that would ask questions.

5. The platform that pays interest until you withdraw

An investment or "crypto banking" platform shows a balance that grows. Statements arrive. Support answers quickly. Small withdrawals succeed early on, which is what converts scepticism into confidence and small deposits into large ones. When you try to take out a meaningful amount, a fee appears: a tax, a compliance charge, an unlock deposit, a conversion cost. Paying it produces another one.

The tell is not the yield. It is the structure of the exit. A regulated institution deducts costs from your balance; it does not require you to send fresh money in before existing money can come out.

The defeating question: is this entity on a regulator's public register, found by typing the regulator's address myself? Cloned-firm fraud copies genuine registration numbers, so the direction of travel matters: regulator first, firm second. Our sceptical guide to crypto banks covers what these platforms actually are and are not.

6. The refund that arrives before the request

Someone tells you an overpayment has been made and asks you to send the difference back. Or an unexpected credit lands and a message follows apologising for the error. The incoming money is real; it is stolen, and it will be reversed. The money you send back is your own, and it will not be.

Cross-border makes this worse, because settlement timing across countries genuinely varies. A credit that will later be clawed back can sit in your account looking entirely settled for days.

The defeating question: has my own bank confirmed this credit is final and irreversible? Not the app screen. The bank.

The pattern behind all six

Five of the six require you to act inside a window. That is the common thread, and it is the one habit worth building: an artificial deadline is the signal. Almost nothing in legitimate banking has to happen in the next ten minutes.

If it has already happened

• Tell your own provider immediately, through the app or the number on your card. Speed is the single biggest factor in whether anything is recoverable.
• Ask explicitly whether a recall or trace can be raised on the payment, and get a reference number.
• Report it to the fraud reporting body in your own country. If a foreign institution is involved, report there too; neither report substitutes for the other.
• Keep everything. Screenshots, the full email headers, transfer confirmations, times, names used.
• Change credentials from a device that was not involved, and check whether any payment limits, new payees or forwarding rules were added to your accounts.
• Reimbursement rules for payments you authorised yourself vary enormously by country and by payment type. Ask your provider what applies to you rather than assuming, and put the question in writing.

What we are not telling you

We have deliberately published no loss figures, no "X per cent of victims" statistics and no named platform blocklist. Fraud numbers circulate widely in versions that are years old or measure different things, and a blocklist is obsolete the week after it is written. Neither would make you safer.

What does make you safer is boring and durable: verify out of band, distrust deadlines, start from the regulator, and never send money to release money. Those four have not changed in a decade and will not change next year.

For the wider picture of how providers try to catch this from their side, see AI fraud detection in banking, and for the account-level habits that stop most of it, banking safety and fraud protection.

General information, not financial or legal advice. Reporting routes, reimbursement rules and consumer protections vary by country and change; check with your own provider and national authority.