Cyber fraud is rampant. The recent Covid 19 pandemic is a good example of the same. Domain Tools in April 2020 identified over 65,000 websites have been identified as fraud scams related to Covid-19. Organisations have lost billions of money in online scams, and in particular with payment diversion fraud (‘PDF’) and ransomware. PDF is a type of cyber-attack where an entity is tricked into making a direct payment from its account to a false supplier/entity often using real-time payment methods. Ransomware is a type of malicious software that prevents users from accessing their system or personal files usually by locking them through encryption, and demands ransom payment in order to regain access. Based on the professional experience of the authors, coupled with current literature, there is a growing trend of automation, with the use of machine-learning and artificial intelligence. This article discusses PDF and ransomware in the context of mechanics and emerging trends for systematic attacks and response by private industry. These case studies illustrate the limited role that the law plays in the investigation and response to cyber fraud.