RED Wheeling's $30,750 solar panel invoice fraud (2024)

A nonprofit's active capital projects are hard to keep fully private since they typically surface in board minutes, grant announcements, or local coverage. The realistic control is to assume project details are knowable to outsiders and require verification on any payment request tied to a known project, rather than trying to suppress the information.

Vendor and partner email-account hardening, including mandatory MFA, conditional access policies, and login-anomaly alerting, reduces the odds that an outside party can take over or convincingly use a legitimate mailbox to originate fraudulent requests.

Bank account-opening and know-your-customer checks can catch some mule accounts early, but recruitment of willing or coerced mules is difficult to prevent upstream. The more reliable control sits downstream at Stage 6, where transaction-pattern monitoring can flag mule behavior after the account is already in use.

Staff training for finance-office personnel on BEC red flags, specifically treating any request to introduce or change payment or banking details as suspicious regardless of how plausible the surrounding project context is, would have flagged this message before payment was processed.

Mandatory call-back verification of any new or changed banking instructions, using an independently sourced phone number for the vendor rather than any contact information in the email itself, combined with dual-approval for wire transfers, would likely have caught the mismatch between the purported vendor and Pierce's personal account before the money moved.

Bank-side transaction monitoring for classic mule patterns, a rapid large inbound transfer followed quickly by an outbound sweep that empties the account, can flag and potentially freeze funds before they are fully dispersed, and is what ultimately helped expose Pierce's role here.

Once funds are dispersed and a mule's account is tied to multiple schemes, the realistic control shifts from prevention to detection and prosecution. Cross-case fraud-pattern investigation by law enforcement, as the West Virginia State Police carried out here, is what identifies a repeat mule before further victims are hit.