One Hyphen. That Is All It Took.

Trust takes decades to build. A thief with a keyboard and a fake URL can burn it down before lunch.

 

Twice this month, criminals posed as Inhabitr to steal money from our clients.

 

Their weapons: inhabitrai.com, inhabitri-ai.com

 

Our real address: inhabitr.ai.

 

One hyphen and a .com apart.

 

They sent clean, confident payment requests. They timed them for Friday afternoon, when AP teams run tired and inboxes run hot.

 

We’re saying this out loud for two reasons. Our clients deserve the facts. And every company wiring CapEx dollars sits in the crosshairs right now.

 

Forget the old tells. Misspelled everything. Clip-art logos. Strange asks. Gone.

 

Today’s scammers study your vendor list, learn your invoice rhythm, and use AI to clone tone, layout, and letterhead in seconds. When the invoice looks right, reads right, and lands on schedule, one thing stands between your cash and a stranger’s account. A person paying attention.

 

This con runs on relationships. It borrows years of good work between partners and spends it in a single wire.

 

Here’s how we’re fighting back:

 

• Law enforcement. We’re working with federal authorities to find the people behind this.
• Checks first. Paper remains our preferred payment method. Slow beats stolen.
• Voice before wire. Every ACH and wire needs a live phone confirmation with a verified Inhabitr contact before money moves.
• Locked invoices. Every invoice lives in DocSend, tied to your corporate email domain. We never send loose PDF attachments.
• One hard rule. We never change banking details by email. Ever. Any email that says otherwise comes from a criminal.
• A human on the line. Our verification hotline, +1 (844) 244-8093, puts a real person behind every payment.

 

Four rules every owner and operator should adopt today:

 

1. Read the domain. Ignore the name. A display name says whatever the thief types. Everything after the @ tells the truth.
   
2. Call on your own line. When an email asks for money or new account details, dial the number already saved in your phone. Never the one in the email.
3. Treat urgency as a red flag. Threats of penalties, late fees, or suspended service mean stop. Real partners wait for a phone call.
4. Report it. Tell the vendor. Warn your network. File with the FBI at ic3.gov.

Most C-suites bury fraud because it feels like a confession. That silence pays the scammer’s bills.

 

Check the address bar. Pick up the phone. Protect the work.