All insights

Wire fraud

The capital call was right. The bank account was not. Now what?

Published
August 11, 2026
Read
6 min
Desk
Coffr Research Desk

Private credit notices can carry the right amount while importing bank details from the wrong record. Treasury needs a source registry before release.

Treasury operations desk with wire approval screen, printed fund notices, payoff letter, and phone handset

Verify a private credit capital call or payoff instruction by treating the notice as untrusted until it matches a controlled source registry, the governing file, the approved beneficiary record, and a call back to a preapproved contact. The control works before release, when obligation and payment authority are still separate.

The market is large enough for weak files to look normal

Private credit payment risk is not only a market visibility problem. It becomes a desk problem when valid obligations and unverified payment instructions enter the same wire queue.

The U.S. direct lending market is estimated to be more than $1.3 trillion, comparable in size to both the high-yield bond and broadly syndicated loan markets, according to PYMNTS coverage of the Federal Reserve Banks' announcement. For treasury, that scale can make private credit notices feel like ordinary payment traffic, where exception discipline weakens.

The Federal Reserve Bank of Dallas and the Federal Reserve Bank of New York plan a voluntary pilot survey of the U.S. private credit market, with aggregate level findings expected during the first quarter of 2027, according to the same report. The report says visibility into new private credit lending activity is more limited than in public credit markets.

PYMNTS also reported that private credit stress and nonbank financial institution stress were increasingly identified by the Fed's market contacts as avenues of financial shock in the Federal Reserve's April 2025 Financial Stability Report, with private credit stress cited by about 20% of market contacts in April 2024. That is not a wire-control statistic. It explains why more finance teams are being asked to formalize the files around this asset class.

The practical problem inside a company is narrower. A notice can be complete on economics and thin on authority.

The controlling facts may sit in a credit agreement, subscription document, side letter, agency appointment record, or internal approval memo. They may not sit in the email or PDF that reaches the wire desk.

The fraud enters through ordinary private credit documents

The risky objects are routine: capital calls, payoff letters, amendment fees, lender account changes, and borrower funding accounts. Teams can reconcile the amount and still import bank details from a document that should only trigger verification.

A notice can carry the correct fund name, borrower name, facility label, due date, and amount. None of those fields proves that the beneficiary account belongs to the right party.

None proves that the sender has authority to change payment instructions.

The fraud path does not need a false investment thesis. It needs a credible document at the point where operations extracts wire details.

Private credit adds handoffs. Funds use administrators. Borrowers deal with agents and lenders. Loans are amended, assigned, and paid off. A treasury analyst may first see a change as a new notice format, a portal message, or a new account line at the bottom of a PDF.

Wire release breaks when the deadline outruns the authority check

The failure sequence is short. A notice enters the workflow, the amount is reconciled, the deadline is treated as real, and the wire is released before anyone tests whether the payment channel and beneficiary account were already authorized.

The control has to attach to that sequence. Each handoff should prove a different fact.

  1. Receipt. Operations records how the notice arrived, by email, portal, agent package, or administrator message. Owner: operations. Check the sender and channel against the source registry before extracting bank details.
  2. Document match. The credit or fund operations owner matches the notice to the agreement, subscription record, amendment, or payoff authority. Owner: credit operations or fund operations. The test is authority, not PDF polish.
  3. Payment instruction check. Treasury compares beneficiary name, bank, routing details, account number, and payment reference to the approved beneficiary record. Owner: treasury. A new account is an exception, even when the amount is expected.
  4. Call back. The team calls a preapproved contact using a number in the source registry, not the notice, email signature, or portal message. Owner: treasury, with legal or credit copied for higher-risk changes.
  5. Deadline hold. A bank account change near a capital call, payoff, amendment fee, or funding deadline is held for secondary review. Owner: treasury lead or controller. The hold is lifted only after the registry contact confirms the change and the authority document supports it.
  6. Release. Dual approval is tied to the governing document and the approved beneficiary record. Owner: first approver validates obligation and amount, second approver validates payee authority and account.
  7. Exception log. Any new agent, administrator, sender domain, portal, beneficiary, or funding account is logged with the approving contact, time, channel, and document basis. Owner: payment operations or treasury controls.

This sequence does not ask the wire team to underwrite the loan. It asks the team to separate obligation from payment authority.

Payment authority records need named owners

No single desk owns the whole record. Treasury owns release, operations owns intake, credit or legal owns authority under the agreement, and payment operations owns beneficiary maintenance.

The weak point appears when each desk believes another desk has verified the part it cannot see. A notice can pass because it looks administratively correct.

  • Source registry. Owner: legal, credit operations, or fund operations. Contents: approved administrators, agents, lenders, borrower contacts, domains, portals, phone numbers, and allowed notice channels.
  • Beneficiary record. Owner: treasury or payment operations. Contents: approved payee name, bank name, account details, effective date, supporting authority, and last confirmation method.
  • Authority map. Owner: legal or credit. Contents: who may issue a capital call, payoff instruction, fee demand, lender account change, or borrower funding instruction.
  • Deadline exception rule. Owner: controller or treasurer. Contents: any bank change close to a payment deadline requires a hold, a call back, and senior release.
  • Agent and administrator change log. Owner: operations. Contents: old party, new party, effective date, supporting document, confirming contact, and first payment affected.

The source registry is the practical center of the control. It is not a contacts spreadsheet if anyone can edit it after receiving a notice.

It is a controlled record with change approval, version history, and a clear owner.

The file has to prove obligation and authority separately

The documents should prove two things separately: that the payment is owed and that the requested beneficiary account is authorized. If one document is being used to prove both, the control is thin.

A capital call notice may prove the amount, due date, fund, investor, and remittance instruction. The subscription documents, side letters, administrator appointment records, and prior approved instructions decide whether that notice came from the right party through the right channel.

A payoff letter may prove the payoff amount and date. The credit agreement, agency provisions, assignment records, and borrower notices decide who can issue the payoff and where funds may be sent.

An amendment fee demand may cite the signed amendment. The signed amendment and fee mechanics decide whether the fee is owed, while the beneficiary record decides where it can be paid.

A lender account change is not a clerical update. It changes the destination of funds. Treat it like a payment event, especially when it arrives near a deadline.

A borrower funding account is the mirror risk. If the borrower receives proceeds into a changed account, the loss may not look like a classic outgoing wire failure, but the control failure is the same. The disbursement account was accepted from the transaction paperwork rather than from an approved record.

The Fed survey plan, as reported by PYMNTS, is aimed at market intelligence. The same lesson applies inside the payment file. If the source registry entry, call back evidence, governing document, approved beneficiary record, and exception log are not present for a changed agent, administrator, or account, the wire is not ready.

Questions practitioners ask

What should we check first when a capital call notice arrives?

Check the source before checking the amount. The sender, domain, portal, administrator, and contact method should match a controlled source registry. Then match the call to the subscription or fund documents and compare the beneficiary account to the approved record. If the account is new, hold the wire until a preapproved contact confirms it.

How should we verify a payoff letter before releasing the wire?

Verify the payoff letter against the credit agreement, agency provisions, assignment records, and internal approval file. The letter can support the amount and date, but it should not be the only source for wire instructions. Treasury should call a preapproved contact using the registry number and confirm the beneficiary account before release.

Who should own the source registry for private credit payments?

Ownership should sit with legal, credit operations, or fund operations, with treasury using the record for release. The registry should contain approved agents, administrators, lender contacts, borrower contacts, domains, portals, phone numbers, and allowed notice channels. Edits should require approval and create a record that treasury can rely on.

When should a lender bank account change be put on hold?

A lender bank account change should be held whenever it appears near a payment deadline, arrives through a new sender, changes the beneficiary, or comes with a new agent or administrator. The hold should stay in place until a registry contact confirms the change and the governing documents support that party's authority to redirect funds.

Share and cite

XLinkedInRedditEmail

Community newsletter

The Trust Layer Briefing

CFOs, controllers, and AP leaders subscribe for weekly research on BEC vectors, ERP gaps, and payment instruction security.

One email each Thursday. No spam, one-click unsubscribe.

Practitioners can also request a seat on The Coffr Research Panel.