Wire Transfer Controls Every MUD Board Should Require

Wire fraud targeting municipalities and special districts has become one of the most common financial crimes in local government. The typical attack is straightforward: a fraudster impersonates a vendor, contractor, or bank representative and requests a change to banking instructions. An employee or board member makes the change without verification. The next wire goes to the fraudster's account. By the time the real vendor reports non-payment, the funds are gone.

The defense is not technology — it is process. Every wire transfer from a district account should require, at minimum: a written wire request form signed by the requesting employee; independent verbal verification of banking instructions directly with the payee using a phone number on file (not one provided in the request); dual authorization from two individuals with wire authority; and board-level approval for any wire above a defined threshold.

The verbal verification step is the most important and the most frequently skipped. It must be a call to a known, pre-existing contact — not a callback to a number included in an email or invoice. Fraudsters count on the efficiency instinct: the person processing the wire does not want to make an extra phone call. That instinct is exactly what they exploit.

Districts should also maintain a whitelist of approved payees with verified banking instructions. Any wire to a new payee, or any change to an existing payee's banking information, should require board notification and enhanced verification — regardless of the amount.

The audit trail matters too. Every wire should be documented with the request form, the verification call log (who called, what number, what was confirmed), the dual-authorization signatures, and the bank confirmation. This documentation protects the district and its board members if a dispute arises.

SafeGov Financial implements SHA-256 chained audit logging on every wire transfer — each transaction record is cryptographically linked to the prior one, making retroactive alteration detectable. Combined with dual-authorization controls and our written verification protocol, it creates a paper trail that satisfies both auditors and insurers. When a board member asks "can we prove that wire was authorized?" the answer is always yes.