The City of Mobile fraud case is a reminder that some of the biggest security risks have nothing to do with hackers breaking into our systems.
When we hear about a multimillion-dollar cybersecurity incident, most of us immediately think of ransomware, stolen passwords, or hackers getting into a company’s network.
But that’s not always how it happens.
The City of Mobile, Alabama, recently reported losing $14.7 million to a fraud scheme involving criminals impersonating a legitimate vendor.
According to city officials, there’s no evidence that their IT systems were compromised. Instead, the criminals reportedly used emails, documents, and phone calls to build trust and convince employees they were dealing with a legitimate business partner.
Even more concerning, local reporting indicates the scheme developed over several months.
Think about that. Months of preparation, without needing to break into a network.
Sometimes, the easiest way into an organization isn’t through its technology. It’s through the everyday processes people trust.
The Part That Should Concern Every Business Leader
Most organizations invest in cybersecurity. Firewalls, endpoint protection, email security, employee training. All important, and all necessary.
But here’s something we don’t talk about enough.
What happens when someone receives what appears to be a perfectly legitimate request from a vendor they’ve worked with for years?
Maybe the vendor has changed banks. Maybe there’s a new account number. Maybe the request comes with familiar documentation and a reasonable explanation.
Would your team question it?
More importantly, does your organization have a process that requires them to verify it?
This is where cybersecurity and financial controls need to work together.
And it’s why incidents like Mobile’s should get the attention of more than just the IT department.
Five Questions Worth Asking Your Team
If there’s one positive thing that can come from an incident like this, it’s an opportunity for other organizations to take a closer look at their own processes.
Here are five questions I’d encourage every CEO, CFO, and IT leader to discuss:
- How do we verify changes to vendor banking information?
Do we independently call a trusted contact using a phone number already on file, or do we rely on the information provided in the request?
- Who approves large payments?
Are there multiple levels of authorization, and does anyone independently verify that the payment is going to the correct account?
- Are our employees prepared for sophisticated fraud attempts?
Today’s scams aren’t always filled with spelling mistakes and suspicious links. Some are carefully planned, convincing, and built around legitimate business relationships.
- Have we tested our processes?
Having a policy is one thing. Knowing that people consistently follow it is another.
- What happens if something slips through?
Would we recognize a fraudulent payment quickly? Does everyone know whom to contact, including the bank, to begin recovery efforts?
These aren’t complicated questions, but the answers could make a significant difference.
Cybersecurity Isn’t Just an IT Problem
One of the biggest misconceptions about cybersecurity is that it’s something the IT department can handle on its own.
It can’t.
Technology plays a critical role, but protecting an organization also requires strong financial controls, clear procedures, employee awareness, and leadership involvement.
A firewall can’t confirm that a vendor’s new bank account is legitimate.
And even the best-trained employee can make a mistake when the right verification procedures aren’t in place.
That’s why cybersecurity needs to be part of a broader conversation about business risk.
The Takeaway
It’s easy to look at an incident like Mobile’s and wonder how something like this could happen.
But a more useful question is whether it could happen to us.
Fraudsters are becoming more sophisticated, more patient, and better at making fraudulent requests look legitimate.
The answer isn’t necessarily buying another security tool. Sometimes, it’s taking a closer look at the processes we already have and making sure they’re working the way we think they are.
At NetraVine, we believe good cybersecurity starts with understanding where an organization is vulnerable, not just technically, but operationally.
Because protecting a business means protecting the people, processes, and decisions that keep it running.
So here’s a question worth bringing to your next leadership meeting:
When was the last time your organization tested whether a convincing fraudster could redirect a legitimate payment?
Sources and Further Reading
City of Mobile, Alabama | October 26, 2026
Mayor Cheriogotis Releases Update on Ongoing Fraud Investigation
The city’s official statement regarding the reported $14.7 million fraud scheme, vendor impersonation, and ongoing investigation.
Read the City of Mobile’s official statement https://www.cityofmobile.gov/news/mayor-cheriogotis-releases-update-on-ongoing-fraud-investigation/
FOX10 News | October 27, 2026
$14.7 Million Fraud Against Mobile Was Months in the Making, City Officials Say
Local reporting providing additional details about the timeline and methods used in the scheme.
Read the FOX10 report: https://www.fox10tv.com/2026/10/27/147-million-fraud-against-mobile-was-months-making-city-officials-say/
Note: The investigation remains ongoing. Details reflect information publicly reported as of October 28, 2026.
