A wire went to the wrong account. Here's what to do in the next hour.

Call your bank first and ask them to recall the wire. Then find out how the attacker got in, because a compromised mailbox keeps sending fake invoices until someone locks it down. We secure your Microsoft 365 accounts and remove what the attacker left behind.

Call 801-SUPPORTGet Help Securing Email

Lock the mailbox

Reset passwords, end active sessions and require MFA on every account the attacker touched.

Find what they left

Attackers set hidden inbox rules to forward or delete your mail. We find and remove them and check sign-in logs for where they came from.

Stop the next one

A callback step for any change to payment details, so a new bank account gets a phone call before money moves.

How it works

Call your bank

Ask for a wire recall. The first hours matter most.

Report it

File a complaint at ic3.gov. The FBI uses these reports to work with banks on recovery.

Secure your email

Call 801-SUPPORT and we lock down the accounts involved.

First-hour checklistURGENT
MONEYCall your bank's fraud line
MONEYFile a complaint at ic3.gov
ACCESSReset the affected user's password
ACCESSSign out all sessions, require MFA
MAILCheck for inbox forwarding rules
PEOPLEWarn accounting and your vendors

Also tell your cyber insurer. Many policies require prompt notice.

After the first hour

Find out how they got in

  • Which accounts the attacker signed into, and from where
  • The rules and forwarding they set up
  • Which vendors and clients got email from the affected account
  • Payment approval steps to add before the next wire
  • The facts your insurer and bank will ask for

Trusted by 100+ companies

  • Liberty Safe
  • Acadia Law Group
  • CandyCo
  • American Fork City
  • Salem City
  • Lucky's Auto Credit
  • Murdock Auto Team
  • GPS

EMAIL COMPROMISE HELP

Tell us what happened

If money is moving right now, call 801-SUPPORT instead of using this form.

95%of clients stay with us
100+companies supported
4offices in Utah and Nebraska

Why teams trust us with this

  • We manage Microsoft 365 for our clients and know where attackers hide in it.
  • We run 24/7 monitoring and threat detection.
  • Microsoft-certified technicians, plus A+ and Network+ certified staff.
95% of clients stay with us

Our team holds

  • Microsoft 365 Certified: Administrator Expert badge
  • CompTIA Network+ certification badge
  • CompTIA A+ certification badge

We use your details only to respond to your request. See our Privacy Policy.

Questions before you ask

Can you get our money back?

No one can promise that. Your bank and the FBI handle recovery, and acting fast gives them the best chance. We focus on stopping further losses.

Was the attacker in our email or our vendor's?

It can be either. Sign-in logs and message headers show which, and that changes who needs to act.

Do we have to report it to anyone else?

It depends on what data the attacker saw. Ask your attorney and your insurer. We give them the technical facts.

Are we locked into a contract?

Ongoing service agreements begin after an initial period. We walk you through the terms before you sign anything.

Sources: FBI Internet Crime Complaint Center

Stop the next fake invoice

Lock down the accounts involved and add a check before the next wire goes out.

Get Help Securing EmailCall 801-SUPPORT