MT103/UETR pressure request correlated with prior M&A wire transfer

Arnold Chan@slaz

•updated Sep 10, 2026•0•0•0

Detects potential Business Email Compromise (BEC) related to 'Phantom Deal' fraud. The rule identifies email threads where a user receives an urgent request for proof of payment (MT103/UETR) within 72 hours of an email discussion involving both wire transfer/payment keywords and M&A/deal context.