This was a common occurrence in Sweden a few years ago, they would target small businesses by changing their address by sending in an address change, then take

This was a common occurrence in Sweden a few years ago, they would target small businesses by changing their address by sending in an address change, then take over the phones and then order a ton of stuff online for which they are never cought. It could go up to millions of SEK in debt before it was discovered by the victim, because invoice time is usually 30 days and credit score will be perfect until after the scam. Since BankID (identity verification) became a norm, this has essentially stopped.