AFP Toronto Webinar "The Money Has Already Left: Human Risk, AI, and Payment Fraud in Treasury"

Join us as we close out Cybersecurity Awareness month!

This session explores how payment fraud has evolved from technical exploitation to highly targeted social engineering. Treasury teams are now facing attackers who understand internal processes, mimic familiar communication patterns, and increasingly use AI to craft messages that look and sound legitimate.

The webinar focuses on three high‑risk scenarios that continue to drive losses across corporate finance:

Fraudsters impersonate vendors, submit new banking details, and rely on operational urgency to bypass verification steps.

2.  Business Email Compromise (BEC)

Attackers compromise or spoof executive accounts, issuing urgent payment instructions that appear authentic.

3.  AI-enhanced impersonation

Generative AI now enables attackers to:

• Write highly convincing emails with correct tone, grammar, and corporate phrasing
• Clone familiar voices to simulate CFOs, controllers, or suppliers
• Personalize attacks using publicly available information

These techniques dramatically increase the likelihood that a busy Treasury analyst or AP clerk will approve a fraudulent payment.

Live Demonstration

To illustrate how accessible these tools have become, the session includes a real‑time demonstration of generating a phishing email using AI.  Attendees see firsthand how quickly an attacker can produce a tailored, credible message — reinforcing that fraud attempts no longer require technical skill, only intent.

About the Speaker: 

Hernan Popper is Founder and Principal Consultant of POPP3R Cybersecurity (Winnipeg, MB), specializing in human risk management and security awareness.

With over 30 years of international business experience, he has designed, implemented and supported security awareness programs for 100+ Canadian organizations including Crown corporations, public media, post-secondary institutions, and transportation authorities.

Hernan holds an MBA and is a Certified Ethical Hacker (CEH), EC-Council Certified Instructor (CEI), SANS Security Awareness Professional (SSAP), GIAC Strategic Planning, Policy and Leadership (GSTRT), and Security Awareness Culture Professional (SACP), and completed Harvard Executive Education in cybersecurity strategy, with additional credentials from MIT. Speaking engagements include the InCyber Forum Montreal, Cybertech Tel Aviv, NASPL PDS 2026 in Seattle, and the National Cybersecurity Alliance Convene Conference in Clearwater, USA.