{"id":394124,"date":"2026-11-06T12:37:56","date_gmt":"2026-11-06T10:37:56","guid":{"rendered":"https:\/\/trustpair.com\/?p=394124"},"modified":"2026-11-06T14:08:44","modified_gmt":"2026-11-06T12:08:44","slug":"how-ap-teams-prevent-bec-and-supplier-impersonation","status":"publish","type":"post","link":"https:\/\/trustpair.com\/gb\/blog\/how-ap-teams-prevent-bec-and-supplier-impersonation\/","title":{"rendered":"How AP Teams Prevent Business Email Compromise and Supplier Impersonation"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Accounts payable teams can prevent business email compromise by combining independent supplier verification, payment controls, employee training and layered email security. The most important rule is simple: never approve a payment or bank detail change based solely on an email, even when the message appears to come from a trusted supplier or senior executive.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Business email compromise is a growing risk for UK organisations. UK Finance reported that criminals stole \u00a31.28 billion through payment fraud in 2025, while financial institutions prevented a further \u00a31.68 billion in attempted unauthorised payment fraud.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">AP teams are particularly exposed because they manage supplier records, approve invoices and release payments through workflows that attackers can imitate.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For finance leaders, a <a href=\"https:\/\/trustpair.com\/gb\/accounts-payables\/\" target=\"_blank\" rel=\"noopener\">fraud prevention solution for accounts payable teams<\/a> can help automate supplier verification, identify suspicious payment details and strengthen controls throughout the procure-to-pay process.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"key-takeaways\">Key Takeaways<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Business email compromise targets trust, urgency and familiar payment workflows rather than relying only on malware.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Supplier impersonation commonly involves compromised email accounts, fake invoices or fraudulent bank detail change requests.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 AP teams should verify payment changes using an independently sourced telephone number and require additional approval for high-value payments.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Security protocols such as DMARC, SPF, DKIM and multi-factor authentication provide stronger layered protection.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Security awareness training and human risk management help employees recognise, report and stop suspicious payment requests.<\/p>\n\n\n<p><!--HubSpot Call-to-Action Code --><span class=\"hs-cta-wrapper\" id=\"hs-cta-wrapper-c5f6fc59-30f8-4309-ba47-68a0a3231f3f\"><span class=\"hs-cta-node hs-cta-c5f6fc59-30f8-4309-ba47-68a0a3231f3f\" id=\"hs-cta-c5f6fc59-30f8-4309-ba47-68a0a3231f3f\"><!--[if lte IE 8]>\n\n<div id=\"hs-cta-ie-element\"><\/div>\n\n<![endif]--><a href=\"https:\/\/cta-redirect.hubspot.com\/cta\/redirect\/5278241\/c5f6fc59-30f8-4309-ba47-68a0a3231f3f\" ><img decoding=\"async\" class=\"hs-cta-img\" id=\"hs-cta-img-c5f6fc59-30f8-4309-ba47-68a0a3231f3f\" style=\"border-width:0px;\" src=\"https:\/\/no-cache.hubspot.com\/cta\/default\/5278241\/c5f6fc59-30f8-4309-ba47-68a0a3231f3f.png\"  alt=\"Nouveau call-to-action\"\/><\/a><\/span><script charset=\"utf-8\" src=\"https:\/\/js.hscta.net\/cta\/current.js\"><\/script><script type=\"text\/javascript\"> hbspt.cta.load(5278241, 'c5f6fc59-30f8-4309-ba47-68a0a3231f3f', {\"useNewLoader\":\"true\",\"region\":\"na1\"}); <\/script><\/span><!-- end HubSpot Call-to-Action Code --><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"what-is-business-email-compromise-and-why-are-uk-ap-teams-at-risk\">What Is Business Email Compromise and Why Are UK AP Teams at Risk?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Business email compromise is a form of fraud in which criminals impersonate a trusted person or compromise a legitimate email account to influence a financial or sensitive business decision. In accounts payable, the objective is often to redirect a payment to an account controlled by the attacker.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A BEC attack may involve a fake invoice, a compromised supplier mailbox, a lookalike domain or an urgent payment request from a senior executive. Attackers may also use phishing links to steal AP employees\u2019 credentials and gain access to payment-related conversations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The risk is amplified by the trust embedded in supplier relationships. AP employees already expect invoices, payment reminders, purchase order references and occasional bank detail changes from suppliers. Attackers exploit that familiarity to make fraudulent requests appear routine.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">UK organisations also operate across several payment methods, including BACS, Faster Payments and CHAPS. Once a fraudulent payment has been released, recovery can be difficult, particularly when funds move quickly through multiple accounts.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For regulated organisations, payment controls should be considered alongside relevant FCA expectations. Any personal data collected during supplier verification and fraud investigations should also be handled in line with UK GDPR requirements.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"how-does-a-bec-attack-target-accounts-payable\">How Does a BEC Attack Target Accounts Payable?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">BEC attacks target AP by inserting fraudulent instructions into normal payment workflows. Criminals may compromise an inbox, imitate a supplier, impersonate an executive or steal credentials that provide access to payment systems.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The attack often follows this pattern:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>The attacker researches the organisation, suppliers, employees and payment cycles.<\/li>\n\n\n\n<li>The attacker gains access to an email account or creates a convincing impersonation.<\/li>\n\n\n\n<li>The attacker monitors conversations or starts a new payment-related exchange.<\/li>\n\n\n\n<li>The attacker requests a payment, invoice approval or bank detail change.<\/li>\n\n\n\n<li>The AP employee processes the request within an existing workflow.<\/li>\n\n\n\n<li>The payment is sent to an account controlled by the criminal.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">The most dangerous attacks do not always look unusual. They may use accurate invoice numbers, familiar project names, previous email content and realistic signatures. This is why the appearance of an email cannot be treated as proof of authenticity.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"how-does-supplier-email-compromise-lead-to-invoice-fraud\">How Does Supplier Email Compromise Lead to Invoice Fraud?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Supplier email compromise allows attackers to exploit an established business relationship. Instead of creating a completely new supplier identity, the criminal uses the supplier\u2019s real account or impersonates the supplier closely enough to influence the finance team.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">An attacker may silently monitor a supplier\u2019s mailbox for days or weeks, learning which services the supplier provides, when invoices are normally sent, who approves payments and how the organisation communicates.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The attacker may then send a fraudulent invoice that matches the supplier\u2019s usual documents. In other cases, the criminal joins an existing email thread and requests a change to the supplier\u2019s bank details. Because the conversation is already familiar, the request may not receive the same scrutiny as a new supplier setup.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Supplier email compromise is a specific form of business email compromise focused on trusted third-party relationships and payment diversion. Read more in this guide to <a href=\"https:\/\/trustpair.com\/gb\/blog\/supplier-email-compromise\/\" target=\"_blank\" rel=\"noopener\">supplier email compromise<\/a>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"why-can-a-genuine-invoice-still-result-in-fraud\">Why Can a Genuine Invoice Still Result in Fraud?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Invoice fraud is particularly difficult to detect when the invoice itself is genuine but the payment details have been altered. The goods or services may have been delivered, the purchase order may be valid and the amount may be correct. The only fraudulent element may be the destination account.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">AP teams should therefore separate two questions:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Is this invoice valid?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022 Does the bank account belong to the intended supplier?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Approving an invoice does not automatically validate the payment destination. Before releasing funds, AP teams must confirm that the supplier owns the account listed in the payment instructions.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"how-does-executive-impersonation-divert-payments\">How Does Executive Impersonation Divert Payments?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Executive impersonation, sometimes called CEO fraud, occurs when criminals pretend to be a senior leader and pressure an employee to make a payment or disclose sensitive information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The request may appear to come from a CEO, CFO, managing director or department head. It often includes an urgent deadline, a request to bypass the normal approval process or a demand for confidentiality.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Attackers exploit authority because AP employees may hesitate to challenge a senior executive. They also use urgency to reduce the time available for verification.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A request such as \u201cPlease process this immediately and do not discuss it with anyone\u201d should be treated as a control trigger, not as an instruction to move faster.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">AP teams should establish a policy that all unusual executive payment requests require independent verification. This may involve calling the executive through a known internal number, confirming the request with the executive\u2019s assistant or requiring a second approver outside the original email chain.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These controls are especially important because CEO phishing attacks often rely on urgency and authority to bypass normal review. Trustpair\u2019s <a href=\"https:\/\/trustpair.com\/gb\/blog\/the-top-4-ceo-phishing-email-examples\/\" target=\"_blank\" rel=\"noopener\">CEO phishing email examples<\/a> show how criminals use false invoice payments, document access requests, gift card scams and other executive impersonation tactics.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"which-bec-warning-signs-should-ap-employees-recognise\">Which BEC Warning Signs Should AP Employees Recognise?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The most important BEC warning signs are unusual timing, changed payment details, mismatched sender information and pressure to bypass established controls.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"what-should-employees-check-in-the-sender-address\">What Should Employees Check in the Sender Address?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The sender\u2019s display name may look correct while the sender address contains a misspelled domain, an extra character, a different top-level domain or a suspicious reply-to address.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Employees should inspect the complete sender address rather than relying on the name displayed in the inbox.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"when-should-a-payment-request-be-considered-unusual\">When Should a Payment Request Be Considered Unusual?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A request deserves additional review when it arrives outside the supplier\u2019s normal billing cycle, just before a bank holiday, late in the day or immediately before a payment run.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Timing alone does not prove fraud, but unusual timing combined with urgency or a change in payment details should stop the transaction until verification is complete.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"why-are-secrecy-and-pressure-important-warning-signs\">Why Are Secrecy and Pressure Important Warning Signs?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Requests to keep a payment confidential, avoid a normal approver or communicate only through email are high-risk signals. Attackers may also claim that a payment is overdue, a contract is at risk or a senior executive will be dissatisfied if the request is delayed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These tactics are designed to make employees reveal sensitive information or bypass normal controls.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"what-should-employees-do-with-unexpected-links\">What Should Employees Do With Unexpected Links?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A payment-related email may include a document or link that requests a login, software update, payment confirmation or account verification.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Employees should not open the link until the sender and request have been independently confirmed. Suspicious messages should be reported through the organisation\u2019s established security process.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"how-should-ap-teams-verify-suppliers-before-approving-payment-changes\">How Should AP Teams Verify Suppliers Before Approving Payment Changes?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">AP teams should verify every sensitive payment change through an independent channel before updating the supplier record or releasing funds.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"use-an-independently-sourced-contact\">Use an Independently Sourced Contact<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The AP employee should use the supplier\u2019s telephone number or contact information already stored in the approved supplier master file. They should never use the number, email address or link included in the change request.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"ask-the-supplier-to-state-the-details\">Ask the Supplier to State the Details<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">During the callback, the supplier should state the relevant payment information rather than simply confirming details read aloud by the AP employee. This reduces the risk that the caller is simply agreeing with fraudulent information.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"apply-dual-approval\">Apply Dual Approval<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A second authorised employee should review the request and verification evidence, particularly for high-value payments, international transfers or changes involving a new country.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"document-the-decision\">Document the Decision<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The verification record should include the date and time of the call, the person contacted, the number used, the source of the contact information, the information confirmed and the final decision.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"monitor-future-changes\">Monitor Future Changes<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A supplier that passes one verification can still be targeted later. Sensitive supplier data should therefore be monitored throughout the supplier lifecycle.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Callback procedures are one of the most established controls for payment diversion, but they are only effective when the contact information is independently sourced and the outcome is documented. See this guide to <a href=\"https:\/\/trustpair.com\/gb\/blog\/call-back-procedures\/\" target=\"_blank\" rel=\"noopener\">secure callback procedures<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"why-do-most-email-security-tools-not-stop-every-bec-attack\">Why Do Most Email Security Tools Not Stop Every BEC Attack?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Most email security tools remain important, but they are not sufficient against BEC because many attacks contain no malware, malicious attachment or obvious technical indicator.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">BEC often relies on social engineering and impersonation rather than malicious code. A plain-text message from a compromised legitimate mailbox may appear to be normal business communication and bypass traditional email filters.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is why AP teams need payment-specific controls in addition to email security tools.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"what-are-domain-based-message-authentication-protocols\">What Are Domain-Based Message Authentication Protocols?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Domain-based message authentication uses SPF, DKIM and DMARC to help verify that emails were sent by authorised sources.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Organisations should configure these security protocols for their domains and move DMARC from monitoring towards enforcement after reviewing legitimate sending sources.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Additional controls should include alerts for suspicious reply-to addresses, detection of lookalike and newly registered domains, external sender warnings and monitoring for mailbox rules that hide or forward payment-related messages.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These controls primarily protect the organisation\u2019s own domain and email environment. They do not replace the need to validate a supplier\u2019s identity and bank account before payment.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"how-can-ap-teams-block-bec-attacks-enabled-by-credential-theft\">How Can AP Teams Block BEC Attacks Enabled by Credential Theft?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">AP teams can block BEC attacks by protecting employees from malicious links and strengthening access controls around email and payment systems.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Attackers may use fake Microsoft 365 login pages, fraudulent supplier portals or document-sharing pages to steal credentials. Once inside an account, they can monitor conversations, create forwarding rules and send realistic payment instructions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Organisations should scan URLs before employees interact with them, block known malicious domains and apply security inspection to links received through email.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"how-does-multi-factor-authentication-reduce-account-takeover-risk\">How Does Multi-Factor Authentication Reduce Account Takeover Risk?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Multi-factor authentication adds an additional verification step beyond a password. It can reduce the impact of stolen credentials, particularly when organisations use phishing-resistant methods.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Payment staff should also be restricted from accessing payment applications through unmanaged devices or unfamiliar locations without additional verification.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">MFA is important, but employees should not approve a transaction solely because an MFA prompt appeared. Attackers may use stolen sessions or social engineering to make a fraudulent login appear legitimate.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"how-does-human-risk-management-reduce-bec-exposure\">How Does Human Risk Management Reduce BEC Exposure?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Human risk management begins with identifying where people can create, change, approve or release payments.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Organisations should map responsibilities across the full procure-to-pay process, including supplier onboarding, supplier master data maintenance, invoice entry, payment proposal creation, payment approval and bank file transmission.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The highest-risk roles are usually those that can change supplier records or release funds. These permissions should not be concentrated in one individual.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Effective controls include separating supplier master data maintenance from payment approval, requiring a second approver for bank detail changes, limiting administrative permissions and reviewing privileged access regularly.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Segregation of duties is particularly important because a single compromised account should not be enough to change a supplier\u2019s bank details and approve the resulting payment.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"how-should-security-awareness-training-prepare-ap-employees\">How Should Security Awareness Training Prepare AP Employees?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Security awareness training is more effective when it reflects the payment scenarios AP employees actually encounter. Generic phishing examples may not prepare finance teams for realistic supplier impersonation or executive fraud.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Training should include scenarios involving a supplier requesting a bank detail change, a fake overdue invoice, a confidential wire transfer from an executive or a phishing link disguised as a shared invoice.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Employees should learn what to do, not only what to notice. They should know how to stop interacting with the message, report it through the approved security channel, notify the AP manager and contact the supplier independently when a payment change is involved.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Training results should be used to improve controls rather than punish individuals. A failed simulation may indicate that the reporting process is unclear or that employees lack the authority to pause a payment.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"how-can-continuous-monitoring-detect-an-active-bec-attack\">How Can Continuous Monitoring Detect an Active BEC Attack?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Continuous monitoring can identify signs of compromise before a fraudulent payment is released. Monitoring should cover both the email environment and the supplier payment process.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"monitor-mailbox-forwarding-rules\">Monitor Mailbox Forwarding Rules<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Attackers may create rules that forward, hide or delete messages involving invoices and payment instructions. These rules can allow criminals to monitor communication without being noticed.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"investigate-unusual-supplier-communication\">Investigate Unusual Supplier Communication<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Warning signs include a sudden change in writing style, new recipients, unusual sending times or a supplier initiating conversations from a new address.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"review-impossible-travel-login-events\">Review Impossible-Travel Login Events<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A login from geographically distant locations within an impossible timeframe may indicate stolen credentials or an active account takeover.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"monitor-lookalike-domains\">Monitor Lookalike Domains<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Criminals may register domains that imitate suppliers, executives or financial institutions. Monitoring domain registrations can help identify impersonation infrastructure before it is used.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"track-supplier-master-data-changes\">Track Supplier Master Data Changes<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Changes to bank accounts, tax information, addresses, contacts or payment terms should be logged and reviewed. Fraudsters may alter contact details before attempting to change payment instructions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The strongest approach correlates these signals. A new mailbox forwarding rule combined with a supplier bank detail change should receive immediate investigation.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"what-should-ap-teams-do-after-a-suspected-bec-attack\">What Should AP Teams Do After a Suspected BEC Attack?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">AP teams should act immediately after detecting a suspected BEC attack because recovery becomes more difficult once funds move through multiple accounts.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"freeze-pending-payments\">Freeze Pending Payments<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Stop any payment connected to the suspicious email, supplier record, beneficiary or compromised account.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"contact-the-bank-immediately\">Contact the Bank Immediately<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Use the bank\u2019s established fraud or treasury contact information and request a payment recall or reversal. Contacting the bank quickly is particularly important for Faster Payments and other transactions that may settle rapidly.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"secure-compromised-accounts\">Secure Compromised Accounts<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Reset credentials, revoke active sessions, remove malicious forwarding rules and review MFA settings. Involve the security team before restoring normal access.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"preserve-evidence\">Preserve Evidence<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Retain emails, headers, attachments, login records, supplier records, approval logs, payment files, call notes and bank communications. Do not delete the suspicious message.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"contact-the-genuine-supplier\">Contact the Genuine Supplier<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Use independently sourced contact information to confirm what happened and prevent further payment attempts.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"escalate-and-report\">Escalate and Report<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Notify finance leadership, information security, legal, risk and executive stakeholders according to the incident response plan.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">UK organisations should report suspected fraud to <a href=\"https:\/\/www.actionfraud.police.uk\/\" target=\"_blank\" rel=\"noopener\">Report Fraud<\/a>. Organisations in Scotland should also consider contacting Police Scotland. The genuine supplier should be notified through a trusted channel, and all evidence should be preserved.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" class=\"wp-block-heading\" id=\"how-should-ap-teams-measure-bec-prevention-performance\">How Should AP Teams Measure BEC Prevention Performance?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">BEC prevention should be measured through operational indicators, not only the number of successful fraud incidents.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">AP leaders should track supplier verification completion rates, payment change exception rates, suspicious email reporting speed, phishing simulation results and the time required to freeze a suspicious payment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Near misses are especially valuable. An attempted fraud that was stopped before payment can reveal weaknesses in supplier verification, approval workflows, security awareness training or monitoring.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Every confirmed incident and near miss should result in a documented improvement, such as a policy change, workflow update, access restriction or new training scenario.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">An effective BEC programme makes it easy for employees to pause a payment, report a concern and obtain timely support. Controls that exist only on paper will not protect AP teams during a high-pressure request.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Accounts payable teams can prevent business email compromise by combining independent supplier verification, payment controls, employee training and layered email security. The most important rule is simple: never approve a payment or bank detail change based solely on an email, even when the message appears to come from a trusted supplier or senior executive. Business [&hellip;]<\/p>\n","protected":false},"author":9,"featured_media":394031,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-394124","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How AP Teams Prevent Business Email Compromise and Supplier Impersonation - Trustpair<\/title>\n<meta name=\"description\" content=\"Learn how UK AP teams detect BEC, verify suppliers, prevent payment diversion and respond to impersonation and invoice fraud.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/trustpair.com\/gb\/blog\/how-ap-teams-prevent-bec-and-supplier-impersonation\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How AP Teams Prevent Business Email Compromise and Supplier Impersonation - Trustpair\" \/>\n<meta property=\"og:description\" content=\"Learn how UK AP teams detect BEC, verify suppliers, prevent payment diversion and respond to impersonation and invoice fraud.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/trustpair.com\/gb\/blog\/how-ap-teams-prevent-bec-and-supplier-impersonation\/\" \/>\n<meta property=\"og:site_name\" content=\"Trustpair\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-06T10:37:56+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-06T12:08:44+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/trustpair.com\/wp-content\/uploads\/How-AP-Teams-Prevent-Business-Email-Compromise-and-Vendor-Impersonation.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1008\" \/>\n\t<meta property=\"og:image:height\" content=\"688\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Julia Suarez\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Julia Suarez\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"13 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/blog\\\/how-ap-teams-prevent-bec-and-supplier-impersonation\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/blog\\\/how-ap-teams-prevent-bec-and-supplier-impersonation\\\/\"},\"author\":{\"name\":\"Julia Suarez\",\"@id\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/#\\\/schema\\\/person\\\/f5876cae04765e0f672445de6e8b156e\"},\"headline\":\"How AP Teams Prevent Business Email Compromise and Supplier Impersonation\",\"datePublished\":\"2026-11-06T10:37:56+00:00\",\"dateModified\":\"2026-11-06T12:08:44+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/blog\\\/how-ap-teams-prevent-bec-and-supplier-impersonation\\\/\"},\"wordCount\":2722,\"publisher\":{\"@id\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/blog\\\/how-ap-teams-prevent-bec-and-supplier-impersonation\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/trustpair.com\\\/wp-content\\\/uploads\\\/How-AP-Teams-Prevent-Business-Email-Compromise-and-Vendor-Impersonation.png\",\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/blog\\\/how-ap-teams-prevent-bec-and-supplier-impersonation\\\/\",\"url\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/blog\\\/how-ap-teams-prevent-bec-and-supplier-impersonation\\\/\",\"name\":\"How AP Teams Prevent Business Email Compromise and Supplier Impersonation - Trustpair\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/blog\\\/how-ap-teams-prevent-bec-and-supplier-impersonation\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/blog\\\/how-ap-teams-prevent-bec-and-supplier-impersonation\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/trustpair.com\\\/wp-content\\\/uploads\\\/How-AP-Teams-Prevent-Business-Email-Compromise-and-Vendor-Impersonation.png\",\"datePublished\":\"2026-11-06T10:37:56+00:00\",\"dateModified\":\"2026-11-06T12:08:44+00:00\",\"description\":\"Learn how UK AP teams detect BEC, verify suppliers, prevent payment diversion and respond to impersonation and invoice fraud.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/blog\\\/how-ap-teams-prevent-bec-and-supplier-impersonation\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/trustpair.com\\\/gb\\\/blog\\\/how-ap-teams-prevent-bec-and-supplier-impersonation\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/blog\\\/how-ap-teams-prevent-bec-and-supplier-impersonation\\\/#primaryimage\",\"url\":\"https:\\\/\\\/trustpair.com\\\/wp-content\\\/uploads\\\/How-AP-Teams-Prevent-Business-Email-Compromise-and-Vendor-Impersonation.png\",\"contentUrl\":\"https:\\\/\\\/trustpair.com\\\/wp-content\\\/uploads\\\/How-AP-Teams-Prevent-Business-Email-Compromise-and-Vendor-Impersonation.png\",\"width\":1008,\"height\":688},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/blog\\\/how-ap-teams-prevent-bec-and-supplier-impersonation\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How AP Teams Prevent Business Email Compromise and Supplier Impersonation\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/#website\",\"url\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/\",\"name\":\"Trustpair\",\"description\":\"Leading Payment Fraud Prevention Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/#organization\",\"name\":\"Trustpair\",\"url\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/trustpair.com\\\/wp-content\\\/uploads\\\/2024\\\/07\\\/Logo-trustpair.svg\",\"contentUrl\":\"https:\\\/\\\/trustpair.com\\\/wp-content\\\/uploads\\\/2024\\\/07\\\/Logo-trustpair.svg\",\"width\":304,\"height\":73,\"caption\":\"Trustpair\"},\"image\":{\"@id\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/trustpair.com\\\/gb\\\/#\\\/schema\\\/person\\\/f5876cae04765e0f672445de6e8b156e\",\"name\":\"Julia Suarez\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fd9f3c948b449649167e4d1747849d71f61c74c1e83ac31ea56617e64a9aec5b?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fd9f3c948b449649167e4d1747849d71f61c74c1e83ac31ea56617e64a9aec5b?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fd9f3c948b449649167e4d1747849d71f61c74c1e83ac31ea56617e64a9aec5b?s=96&d=mm&r=g\",\"caption\":\"Julia Suarez\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How AP Teams Prevent Business Email Compromise and Supplier Impersonation - Trustpair","description":"Learn how UK AP teams detect BEC, verify suppliers, prevent payment diversion and respond to impersonation and invoice fraud.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/trustpair.com\/gb\/blog\/how-ap-teams-prevent-bec-and-supplier-impersonation\/","og_locale":"en_GB","og_type":"article","og_title":"How AP Teams Prevent Business Email Compromise and Supplier Impersonation - Trustpair","og_description":"Learn how UK AP teams detect BEC, verify suppliers, prevent payment diversion and respond to impersonation and invoice fraud.","og_url":"https:\/\/trustpair.com\/gb\/blog\/how-ap-teams-prevent-bec-and-supplier-impersonation\/","og_site_name":"Trustpair","article_published_time":"2026-11-06T10:37:56+00:00","article_modified_time":"2026-11-06T12:08:44+00:00","og_image":[{"width":1008,"height":688,"url":"https:\/\/trustpair.com\/wp-content\/uploads\/How-AP-Teams-Prevent-Business-Email-Compromise-and-Vendor-Impersonation.png","type":"image\/png"}],"author":"Julia Suarez","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Julia Suarez","Estimated reading time":"13 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/trustpair.com\/gb\/blog\/how-ap-teams-prevent-bec-and-supplier-impersonation\/#article","isPartOf":{"@id":"https:\/\/trustpair.com\/gb\/blog\/how-ap-teams-prevent-bec-and-supplier-impersonation\/"},"author":{"name":"Julia Suarez","@id":"https:\/\/trustpair.com\/gb\/#\/schema\/person\/f5876cae04765e0f672445de6e8b156e"},"headline":"How AP Teams Prevent Business Email Compromise and Supplier Impersonation","datePublished":"2026-11-06T10:37:56+00:00","dateModified":"2026-11-06T12:08:44+00:00","mainEntityOfPage":{"@id":"https:\/\/trustpair.com\/gb\/blog\/how-ap-teams-prevent-bec-and-supplier-impersonation\/"},"wordCount":2722,"publisher":{"@id":"https:\/\/trustpair.com\/gb\/#organization"},"image":{"@id":"https:\/\/trustpair.com\/gb\/blog\/how-ap-teams-prevent-bec-and-supplier-impersonation\/#primaryimage"},"thumbnailUrl":"https:\/\/trustpair.com\/wp-content\/uploads\/How-AP-Teams-Prevent-Business-Email-Compromise-and-Vendor-Impersonation.png","inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/trustpair.com\/gb\/blog\/how-ap-teams-prevent-bec-and-supplier-impersonation\/","url":"https:\/\/trustpair.com\/gb\/blog\/how-ap-teams-prevent-bec-and-supplier-impersonation\/","name":"How AP Teams Prevent Business Email Compromise and Supplier Impersonation - Trustpair","isPartOf":{"@id":"https:\/\/trustpair.com\/gb\/#website"},"primaryImageOfPage":{"@id":"https:\/\/trustpair.com\/gb\/blog\/how-ap-teams-prevent-bec-and-supplier-impersonation\/#primaryimage"},"image":{"@id":"https:\/\/trustpair.com\/gb\/blog\/how-ap-teams-prevent-bec-and-supplier-impersonation\/#primaryimage"},"thumbnailUrl":"https:\/\/trustpair.com\/wp-content\/uploads\/How-AP-Teams-Prevent-Business-Email-Compromise-and-Vendor-Impersonation.png","datePublished":"2026-11-06T10:37:56+00:00","dateModified":"2026-11-06T12:08:44+00:00","description":"Learn how UK AP teams detect BEC, verify suppliers, prevent payment diversion and respond to impersonation and invoice fraud.","breadcrumb":{"@id":"https:\/\/trustpair.com\/gb\/blog\/how-ap-teams-prevent-bec-and-supplier-impersonation\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/trustpair.com\/gb\/blog\/how-ap-teams-prevent-bec-and-supplier-impersonation\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/trustpair.com\/gb\/blog\/how-ap-teams-prevent-bec-and-supplier-impersonation\/#primaryimage","url":"https:\/\/trustpair.com\/wp-content\/uploads\/How-AP-Teams-Prevent-Business-Email-Compromise-and-Vendor-Impersonation.png","contentUrl":"https:\/\/trustpair.com\/wp-content\/uploads\/How-AP-Teams-Prevent-Business-Email-Compromise-and-Vendor-Impersonation.png","width":1008,"height":688},{"@type":"BreadcrumbList","@id":"https:\/\/trustpair.com\/gb\/blog\/how-ap-teams-prevent-bec-and-supplier-impersonation\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/trustpair.com\/gb\/"},{"@type":"ListItem","position":2,"name":"How AP Teams Prevent Business Email Compromise and Supplier Impersonation"}]},{"@type":"WebSite","@id":"https:\/\/trustpair.com\/gb\/#website","url":"https:\/\/trustpair.com\/gb\/","name":"Trustpair","description":"Leading Payment Fraud Prevention Platform","publisher":{"@id":"https:\/\/trustpair.com\/gb\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/trustpair.com\/gb\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/trustpair.com\/gb\/#organization","name":"Trustpair","url":"https:\/\/trustpair.com\/gb\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/trustpair.com\/gb\/#\/schema\/logo\/image\/","url":"https:\/\/trustpair.com\/wp-content\/uploads\/2024\/07\/Logo-trustpair.svg","contentUrl":"https:\/\/trustpair.com\/wp-content\/uploads\/2024\/07\/Logo-trustpair.svg","width":304,"height":73,"caption":"Trustpair"},"image":{"@id":"https:\/\/trustpair.com\/gb\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/trustpair.com\/gb\/#\/schema\/person\/f5876cae04765e0f672445de6e8b156e","name":"Julia Suarez","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/fd9f3c948b449649167e4d1747849d71f61c74c1e83ac31ea56617e64a9aec5b?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fd9f3c948b449649167e4d1747849d71f61c74c1e83ac31ea56617e64a9aec5b?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fd9f3c948b449649167e4d1747849d71f61c74c1e83ac31ea56617e64a9aec5b?s=96&d=mm&r=g","caption":"Julia Suarez"}}]}},"_links":{"self":[{"href":"https:\/\/trustpair.com\/gb\/wp-json\/wp\/v2\/posts\/394124","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/trustpair.com\/gb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/trustpair.com\/gb\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/trustpair.com\/gb\/wp-json\/wp\/v2\/comments?post=394124"}],"version-history":[{"count":2,"href":"https:\/\/trustpair.com\/gb\/wp-json\/wp\/v2\/posts\/394124\/revisions"}],"predecessor-version":[{"id":394181,"href":"https:\/\/trustpair.com\/gb\/wp-json\/wp\/v2\/posts\/394124\/revisions\/394181"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/trustpair.com\/gb\/wp-json\/wp\/v2\/media\/394031"}],"wp:attachment":[{"href":"https:\/\/trustpair.com\/gb\/wp-json\/wp\/v2\/media?parent=394124"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/trustpair.com\/gb\/wp-json\/wp\/v2\/categories?post=394124"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/trustpair.com\/gb\/wp-json\/wp\/v2\/tags?post=394124"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}