The Dillon Police Department is urging Montana small business owners to scrutinize their financial accounts after several local companies reported unauthorized withdrawals tied to what appears to be a coordinated fraud scheme involving QuickBooks accounting software.
Police say the reports surfaced over a span of just three days, with some individual businesses losing more than $20,000. The department issued a public warning after receiving multiple complaints from affected business owners in Dillon.
How the Scheme Works
Investigators believe the fraud typically begins with a suspicious or unauthorized email sent to a business. Once bad actors gain access to a company’s QuickBooks account, they initiate unauthorized transfers that are disguised within the software as routine payroll activity — appearing as payments or direct deposits labeled as going to employees.
In some cases, fraudsters use the names of actual employees to make the transactions appear legitimate. Those employees, however, never receive the money. Instead, the funds are routed to unknown bank accounts controlled by the perpetrators.
The use of real employee names makes the fraudulent entries harder to catch during routine account reviews, investigators noted, particularly for businesses that process payroll regularly.
What Business Owners Should Do
Dillon Police advised all local business owners — not just those who have already been affected — to conduct an immediate review of several areas:
- Incoming and outgoing emails, especially any unexpected messages requesting account access or credentials
- Recent payroll activity and direct deposit records
- Bank transactions for any unfamiliar or unexplained withdrawals
- Any recent changes made to account settings or user permissions
Officers also warned businesses not to click links embedded in unexpected emails, and not to provide banking or account information in response to unsolicited messages, regardless of how official they may appear.
Any business that believes it has been targeted should contact its financial institution immediately to flag suspicious transactions and attempt to recover funds. Victims are also encouraged to file a report with local law enforcement as soon as possible, as prompt reporting improves the chances of tracing the stolen money.
Broader Context for Montana Small Businesses
Dillon, the seat of Beaverhead County in southwestern Montana, has a relatively small but tight-knit business community, making a cluster of fraud incidents within a short window particularly significant. The rapid pace of the scheme — multiple victims in under 72 hours — suggests an organized effort rather than isolated opportunism.
QuickBooks is among the most widely used small business accounting platforms in the country, and fraud exploiting the software has been documented in other states as well. Criminals typically target businesses that process regular payroll runs, as those operations involve frequent account-to-account transfers that can obscure unauthorized activity.
Business owners across Montana should be aware that similar schemes have appeared in other small communities and are not limited to Dillon. Cybercriminals frequently target rural and small-market businesses, in part because those operations may have fewer dedicated IT or financial oversight resources compared to larger firms.
If you receive an unexpected email related to your business banking, payroll provider, or accounting software, law enforcement recommends verifying any request through a known, trusted phone number before taking any action — never through contact information provided in the suspicious message itself.
Anyone with information about the Dillon fraud incidents or who believes their business has been victimized should reach out to the Dillon Police Department directly.
