Trade finance fraud: red flags, typical schemes and how to verify

What is trade finance fraud?

Trade finance fraud covers any attempt to obtain money, goods or credit by misusing the instruments and documents of international trade: letters of credit, standby letters of credit (SBLCs), bank guarantees, bills of lading, invoices, inspection certificates and payment messages. Some schemes target banks; many target companies, especially small importers, exporters and project sponsors who need financing and are approached by intermediaries.

Two features make the area vulnerable. The instruments are technical, so an official-sounding vocabulary can impress people who do not use it every day. And banks work on documents, not on goods: under UCP 600, a bank examines a presentation on the basis of the documents alone to decide whether they appear on their face to comply.

What are the most common schemes?

Advance-fee instrument schemes

A broker or “provider” offers an SBLC, a bank guarantee, a proof of funds or a loan, and asks for fees first: issuance, “lease”, legal, insurance or “SWIFT” charges. The instrument never arrives, or arrives as a worthless document. The FBI’s 2019 warning on fictitious SBLCs lists advance fees, non-recourse loans, “blocking of funds” and the term “monetize” among common features. See our guide on leased SBLCs and guarantees.

Fake or forged instruments

A guarantee or standby is presented as collateral or as payment security, but was never issued by the named bank. The ICC Financial Investigation Bureau has reported fake standbys with incorrect banking terms, spelling and grammar errors, and unusual instructions such as asking the applicant for an access and PIN code. It has also reported guarantees naming institutions that did not exist or were unregulated, sometimes with names similar to real ones.

Counterfeit SWIFT messages

The FBI warns that fraudsters use counterfeit “MT 799” and “MT 760” messages or documents to make schemes look authentic. Only banks connected to SWIFT exchange these messages, and only the receiving bank can confirm that an authenticated message arrived. See SWIFT MT700, MT760, MT799 and MT103.

“Prime bank” and trading programmes

Investors are told their money will buy and trade bank instruments for high, risk-free returns. The SEC states that all such prime bank programmes are fraudulent, whether they are called standby letters of credit, bank guarantees, trading platforms or roll programmes.

Document fraud under letters of credit

Forged or fabricated bills of lading, invoices or certificates are presented so that a bank pays against documents that look compliant, sometimes for goods that were never shipped. Related schemes include financing the same goods or receivables with several lenders.

Payment diversion

In business email compromise, criminals send a message that appears to come from a known supplier or executive and redirect a payment to their own account, often after gaining access to real email threads about invoices.

What are the red flags?

In the offer

• Fees payable before any bank has issued, advised or confirmed anything.
• Returns or loan amounts out of proportion to the risk, or “non-recourse” money with no repayment source.
• Secrecy, non-disclosure and non-circumvention agreements before any facts are shared; pressure to act fast.
• Claims of backing by the Federal Reserve, the IMF, the World Bank or the ICC.
• Procedures built on MT799 “RWA”, “pre-advice” or “blocked funds” messages, see RWA letters.

In the documents

• References to forms that do not exist, such as “ICC 3034” or “ICC 3039” letters of credit, which the Federal Reserve Bank of New York has flagged.
• Phrases such as “fresh cut”, “seasoned”, “top 25 world bank” or “good, clean, clear funds of non-criminal origin”.
• Mismatches between the bank’s name, address, BIC and the branch that supposedly issued the instrument.
• Instructions to send codes, passwords or online-banking access.

In the payment

• A new bank account announced by email, especially in another country or another name.
• Payment requested to a personal account, a third party or an attorney escrow account.

How do you verify a bank, an instrument and a counterparty?

1. Identify the bank. Look up the BIC in the SWIFT BIC directory, and check that the institution appears in the public register of its banking supervisor (for example the Banco de España register in Spain or REGAFI in France). Watch for names that differ by a word or a letter from a real bank.
2. Contact the bank independently. Find the trade finance or guarantees department through the bank’s official website, typed in yourself, and ask it to confirm the reference, amount, beneficiary and expiry. Never rely on phone numbers or emails printed on the document you are checking.
3. Confirm through your own bank. Ask your bank to confirm in writing that it has received an authenticated MT700 or MT760 for you. A copy sent by an intermediary is not a confirmation.
4. Check the counterparty. Consult the company register of its country, its Legal Entity Identifier in the GLEIF LEI search where it has one (many small firms do not), its website history and sanctions lists. Absence of an LEI is not proof of fraud; a mismatch between registers is a warning.
5. Check transport documents with the carrier. Verify bill of lading numbers, vessel and dates with the shipping line or its agent, using contact details from the carrier’s own website.
6. Secure payments. Confirm any change of bank details by calling a number you already hold, and require two people to approve new beneficiaries.
7. Pay fees only under a clear engagement. Pay regulated institutions or identified advisers under a signed contract describing the service, never “instrument fees” to intermediaries you cannot verify.

Example (illustrative): an importer receives a PDF “MT760” from a broker who asks for a fee to “activate” it. The importer’s bank confirms it has received no message, and the named issuing bank, called through its official switchboard, has no record of the reference. The importer pays nothing.

What does a letter of credit protect against, and what not?

A documentary letter of credit protects the seller against the buyer’s non-payment, provided it presents compliant documents. It protects the buyer in that the bank pays only against the documents the credit requires. It does not guarantee the goods: banks deal with documents, not goods (UCP 600 article 5), and do not take responsibility for the genuineness of documents (article 34). Most legal systems recognise a narrow fraud exception, but it is difficult to invoke and varies by country.

Buyers reduce document risk by requiring inspection certificates from independent, named inspection companies, specifying who must issue each document, and choosing counterparties with a verifiable track record.

What should you do if you suspect fraud?

• Stop any payment and contact your bank immediately, asking it to contact the receiving bank: the chances of recovering a transfer fall quickly with time.
• Keep every email, message, document and payment record.
• Report to the police or the competent authority in your country; in the United States, complaints go to the FBI’s Internet Crime Complaint Center (IC3).
• Inform the bank whose name was used, through its official channels.
• Be wary of anyone offering to recover your money for an additional fee.

How Star Alliance can help

Star Alliance Consulting is not a bank and cannot authenticate SWIFT messages itself, but it can review an offer or a document before you pay or rely on it: we check consistency with ICC rules and market practice, list the points to verify and tell you which bank or authority can confirm them. For real transactions, we help prepare the file and wording and coordinate with the issuing institutions, which make the final decision. See our verification service.

Frequently asked questions