> For the complete documentation index, see [llms.txt](https://docs.stoik.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.stoik.io/human-security/advanced/payment-fraud-setup.md).
# Payment fraud: setup
Payment fraud simulation tests whether your employees would wire money to a fraudster impersonating a colleague, a manager or a supplier, the technique used in real "business email compromise" (BEC) attacks. It is included in the Human Security Advanced offer.
Before your first campaign, Stoïk opens a simulation bank account in your company's name. This is a one-time step. To make the test realistic, Stoïk needs a real bank account that can receive a transfer. It is opened in your company's name through our payment provider, Stripe. Because it is a real bank account, Stripe is legally required to verify your company and the people who own or run it.
Any money wired to this account during a simulation stays yours and is automatically returned within one hour.
## Prerequisites
* Your company's registration number and a registration document.
* For your representative and each owner or director: date of birth, home address, email address, a photo ID and a recent proof of home address.
The form takes about 15 minutes. Stripe's verification then runs in the background and usually takes up to 24 hours.
## Start the setup
Go to `Overview` > `Settings` > `Payment fraud`, tick the [Stripe Connected Account Agreement](https://stripe.com/fr/legal/connect-account) and click **Activate**. Stripe's secure form opens inside Stoïk Protect, pre-filled with what we already know about your company.
You can leave at any point without losing your answers. When you come back, click **Resume** to continue where you stopped.
## Complete the form
{% stepper %}
{% step %}
### Business type
Confirm your **business type** and your **business structure** (its precise legal form, such as a *Société* in France). Both are pre-filled from your Stoïk record.
{% endstep %}
{% step %}
### Business details
Check the pre-filled values and complete what is missing:
* **Legal business name**: must match the name attached to your registration number exactly
* **Trading name**: optional, if you operate under a different name
* **Registration number**: your SIREN, CIF, KvK or local equivalent, usually already filled in
* **Business address**: start typing the street and **pick your address from the suggestion list**, so the postal code and city fill in automatically
* **Business phone number**
* **Business website**: if you have none, use "Add product description instead" and describe your activity
{% endstep %}
{% step %}
### Account representative
The person authorised to represent your company, usually the person doing this setup. Provide their legal first and last name as written on their ID, email address, job title, date of birth, home address and phone number. To use someone else, add or select a different person.
Stripe checks these details against public records. This check can stay pending for up to 24 hours and does not block you from continuing.
{% endstep %}
{% step %}
### Owners or directors
Stripe needs everyone who owns more than 25% of the company, directly or indirectly, and anyone on the governing board.
1. **Confirm the list.** Stripe proposes the owners found in public records. Click **Confirm**, or **Change owners** to add or remove people.
2. **Complete each person.** Provide their email address, date of birth and home address. Names found in public records cannot be edited.
3. **Add two proofs per person:**
* **Identity**: click **Start verification** and photograph their ID. You can scan it with your phone using the QR code, email the person a link, or use your computer's camera.
* **Home address**: click **Start upload**, choose the document type (electricity bill, rent receipt, tax notice or bank statement, for example), upload it, and confirm it shows their name and address exactly as entered.
{% endstep %}
{% step %}
### Review and submit
Anything outstanding is marked **Incomplete** or **Invalid**. Click **Edit** next to each item to complete it. When nothing is flagged, click **Agree and submit**.
{% endstep %}
{% endstepper %}
## After you submit
Stripe reviews your account to issue your simulation IBAN. This usually takes up to 24 hours and needs no action from you.
Once approved, the `Payment fraud` page shows the IBAN, BIC and beneficiary name used in your simulations. You can now [launch a campaign](/human-security/advanced/payment-fraud-campaign.md).
{% hint style="warning" %}
If Stripe cannot open the account, the page shows a **Rejected** badge with the reason. Contact us and we will help you resolve it.
{% endhint %}
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://docs.stoik.io/human-security/advanced/payment-fraud-setup.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
