Cybercriminals Posing as Bank Officials Steal From United Methodist Body

Faith Facts

• Over $1.6 million was stolen from a United Methodist Church regional body through a sophisticated cyberattack involving criminals impersonating bank representatives.
• The theft highlights growing cybersecurity threats facing Christian organizations and churches across America.
• The incident serves as a warning to faith-based institutions to strengthen digital security measures and financial safeguards.

A regional body of The United Methodist Church has fallen victim to a sophisticated cybercrime scheme that resulted in the theft of more than $1.6 million in ministry funds. The criminals successfully impersonated bank representatives to gain access to the funds, marking another troubling example of how faith-based organizations are increasingly targeted by sophisticated cybercriminals.

The attack represents a significant financial blow to the regional church body, which relies on these funds to support local congregations, missions, and ministry operations throughout its territory. Such funds typically come from tithes, offerings, and donations from faithful members who trust church leadership to be good stewards of their sacrificial giving.

This incident underscores a growing threat that churches and Christian organizations face in an increasingly digital world. As more financial transactions move online and banking becomes digitized, criminals have developed more sophisticated methods to exploit vulnerabilities in organizational systems.

The theft serves as a stark reminder that churches and faith-based institutions must prioritize cybersecurity alongside their spiritual missions. Many religious organizations operate with limited IT resources and may lack the robust security protocols that larger corporations employ, making them attractive targets for cybercriminals.

Church leaders and financial officers nationwide should take this incident as a warning to review their own security procedures, implement multi-factor authentication, establish verification protocols for financial transactions, and provide training to staff members on recognizing potential scams and phishing attempts.

The investigation into the theft is ongoing, and it remains unclear whether any of the stolen funds will be recovered. Such cases often prove difficult to resolve as cybercriminals frequently operate from overseas locations beyond the reach of U.S. law enforcement.

This attack on church resources represents more than just financial loss—it undermines the trust that congregants place in their religious institutions and diverts resources away from ministry work, missions, and community outreach that serve those in need.

Let us know what you think, please share your thoughts in the comments below.