FBI Reports $2.7B in Invoice Fraud Losses as PDF Structural Flaws Go Undetected

The FBI's Internet Crime Complaint Center recorded over $2.7 billion in losses from business email compromise and invoice fraud in 2023, with accounts payable departments as the primary target. Fraudsters typically intercept legitimate PDF invoices and alter payment details — such as bank account numbers — before forwarding them to AP teams. Three common fraud patterns exist: bank-detail swaps via compromised emails, entirely fabricated supplier invoices, and line-item inflation on real invoices, all of which leave detectable structural traces in the PDF file. Standard AP controls like three-way matching and OCR-based automation fail to catch these manipulations because they only verify displayed content, not the underlying file structure. Major AP platforms including Coupa, Ariba, and Bill.com do not perform structural PDF forensics, leaving a critical gap between invoice receipt and payment approval.