It is the most expensive email an accounts team ever opens. A known supplier writes that their bank account has changed and asks you to remit the next payment, often a large one, to a new account. The email looks normal: the right signature, a familiar name, maybe a reply to a real thread. The money goes out. Weeks later the genuine vendor asks where their payment is.
This is business email compromise (BEC), and invoice redirection is its most common form in India. It does not rely on malware. It relies on a busy AP clerk trusting an email under time pressure. For CA firms managing client payments and finance teams running vendor payouts, one redirected invoice can mean lakhs gone and a very hard client conversation. This free tool looks for the tells; the section below shows the one habit that reliably stops it.