Case Library / Phishing / SCI Engineered Materials $898,325 Imposter Scam / Bank Fraud (2026)

SCI Engineered Materials $898,325 Imposter Scam / Bank Fraud (2026)

A small Columbus, Ohio public materials manufacturer disclosed in a February 2026 SEC 8-K that it lost $898,325 to an "imposter scam executed in conjunction with bank fraud," recovering only $336,299 by the following quarter despite same-day bank, FBI, and insurer engagement.

Share:

Social Engineering Examples·7 sources

What happened

On February 10, 2026, SCI Engineered Materials, Inc. (OTCQB: SCIA), a small Columbus, Ohio-based manufacturer of physical-vapor-deposition thin-film materials, filed a Form 8-K (and a same-day 8-K/A correcting only an exhibit title) disclosing under Item 8.01 that it "was subjected to an imposter scam of $898,325 executed in conjunction with bank fraud." Per the filing, management contacted the company's financial institution and filed a report with the FBI's Internet Crime Complaint Center (IC3) immediately upon recognizing the event, and began working with its insurance carrier to pursue recovery. SCI stated it found no evidence of additional fraudulent activity and did not believe the incident led to unauthorized access to company data or systems, though an investigation into the incident's impact on internal controls remained ongoing. The company's subsequent Form 10-Q for Q1 2026 disclosed that $336,299 of the $898,325 had been recovered as of April 30, 2026, leaving a net fraud expense of $562,026 recognized in that quarter's results, a sum large enough to materially distort the quarter's operating-expense comparison versus the prior year.

How it worked

SCI's February 10, 2026 disclosure describes an "imposter scam of $898,325 executed in conjunction with bank fraud." That notice does not identify the impersonated party, communication channel, lure, payment rail, authorizing employee or destination account. It supports the reported impersonation fraud and financial loss, but it does not establish a classic email-based BEC sequence.

The lure and the tell

The February 10 notice does not reproduce the fraudulent communication or explain how the company recognized it. A specific lure or tell cannot be reconstructed from that notice. Urgency, secrecy, lookalike domains and vendor-bank-detail changes should not be treated as facts of this incident.

Outcome

As of June 30, 2026, SCI had recovered $336,299 of the $898,325 and retained the $562,026 fraud expense recorded in the first quarter. On July 12, 2026, the company was informed that a $250,000 Smart Cyber insurance claim was approved; SCI said the proceeds, when realized, would reduce the fraud expense to $312,026. SCI's February disclosure said management immediately contacted its bank, filed an FBI IC3 report, and worked with its insurer. It also said no additional fraudulent activity or unauthorized access had been found, business operations were unaffected, and the internal-controls investigation was then ongoing.

Why it matters

The February 10 notice and the second-quarter results excerpt separate gross fraud loss, recovered funds and an approved insurance claim. They establish the financial impact and response without specifying the original impersonation mechanism in those two passages. The case illustrates why an incident label alone is insufficient to reconstruct an attack sequence, and why approved insurance proceeds must be distinguished from money received.

Defenses

SCI disclosed immediate bank notification, an FBI IC3 report, insurer engagement and an internal-controls investigation in February 2026. Independent counterparty verification, payment approval and prompt bank reporting are relevant general safeguards. The February 10 notice does not establish which preventive controls were missing or whether any particular control would certainly have stopped this fraud.

Sources
Cite this case

Social Engineering Examples. “SCI Engineered Materials $898,325 Imposter Scam / Bank Fraud (2026)”. Accessed 3 November 2026. https://socialengineeringexamples.com/sci-engineered-materials-imposter-scam-2026

Attack Chain & Defense
1Disclosed incident
What happened

SCI reported an imposter scam executed in conjunction with bank fraud. Its February 10 notice does not describe reconnaissance.

The control that would have stopped it

the February 10 notice does not establish a reconnaissance method, so an incident-specific preventive control cannot be assigned to this stage.

2Impersonation setup
What happened

the February 10 notice does not identify the impersonated party or the communication channel.

The control that would have stopped it

independently verify a claimed counterparty's identity before acting on financial instructions; the disclosure does not establish whether email controls would have addressed this incident.

3Contact and lure
What happened

the February 10 notice does not provide a message, call script or payment instruction.

The control that would have stopped it

give staff an independent route to check unusual financial requests. This is a general recommendation, not a disclosed SCI control failure.

4Authorization
What happened

the February 10 notice does not establish who approved the transaction or whether urgency or secrecy was used.

The control that would have stopped it

require independent authorization for unusual financial instructions; do not infer an urgency or secrecy pretext from the loss alone.

5Loss
What happened

SCI disclosed an $898,325 fraud loss; the notice does not identify a wire or ACH payment rail.

The control that would have stopped it

verify new or changed beneficiary instructions through a known contact and apply independent payment approval. These are general controls, not proven missing steps in this incident.

6Response
What happened

management contacted its financial institution, filed an FBI IC3 report and worked with its insurer immediately upon recognizing the event. The notice does not describe subsequent movement through mule accounts.

The control that would have stopped it

notify the bank and law enforcement promptly. SCI disclosed bank notification and an FBI IC3 report in its February 10 notice. Preserving the transaction record is a general recommendation, not an action established by that notice. The notice does not establish why recovery was partial.

7Objective completion
What happened

As of June 30, 2026, SCI had recovered $336,299 and recorded fraud expense of $562,026. A $250,000 insurance claim was approved on July 12, but SCI said the expense would fall to $312,026 only when the proceeds were realized.

The control that would have stopped it

Cyber-crime insurance riders that explicitly cover social-engineering-induced fraud and continued law-enforcement engagement are potential backstops. SCI engaged its insurer, and a $250,000 Smart Cyber insurance claim was approved on July 12, 2026, but the company said the proceeds had yet to be realized.

Quick Facts
Victim
SCI Engineered Materials, Inc.
(OTCQB: SCIA), a Columbus, Ohio-based global supplier and manufacturer of advanced materials for physical vapor deposition (PVD) thin-film applications serving aerospace, defense, automotive, semiconductor, and solar customers.
Company
SCI Engineered Materials, Inc.
Location
Columbus, Ohio, USA (SCI Engineered Materials headquarters)
Date
2026-02-10
Impact
$898,325 gross loss disclosed February 10, 2026 ("imposter scam ...
BasismeasuredLoss and recovery disclosed in the Form 8-K and Form 10-Q
executed in conjunction with bank fraud"). As of June 30, 2026, SCI had recovered $336,299 and recorded fraud expense of $562,026. On July 12, 2026, SCI was informed that a $250,000 Smart Cyber insurance claim was approved; the company said the proceeds, when realized, would reduce fraud expense to $312,026.
Status
Documented incident
Case Type
Real-World Incident
Sector
Defense & Aerospace, Manufacturing & Industrial
Threat Actor
unknown
Explore more

Related Cases

Browse by what this case has in common with others in the library.