(The Center Square) – The Cleveland Public Library transferred almost $400,000 to a fake vendor as part of a payment redirect scam, State Auditor Keith Faber said Tuesday.

Faber said the library failed to adopt proper internal controls that would have detected the scheme.

More than a year ago, Faber issued a bulletin to all public offices on handling payment redirect requests. According to state auditors, the Cleveland Public Library did not follow the controls established in that bulletin.

Immediately following the incident, the library changed its controls.

“The library did not have a proper internal control process in place to detect fictitious vendors,” auditors wrote. “We did note that the library immediately implemented multiple vendor verification measures to prevent future business email compromise schemes.”

Auditors said the library changed bank payment information after getting a request from someone pretending to be a legitimate vendor.

Insurance covered $350,000 of the nearly $400,000 scammed, and the legitimate vendor forgave $46,405, allowing the library to recoup the entire lost amount.

Another $133,849 was recovered from the fraudulent bank account and repaid to the insurance company.

The bulk of the library’s funds comes from taxpayers. It’s 2026 funding request included 40% from the Ohio Public Library Fund.

LIVE UPDATES: FBI DIRECTOR KASH PATEL TESTIFIES BEFORE CONGRESS IN AFTERMATH OF CHARLIE KIRK ASSASSINATION

The state’s new budget cut overall library funding, which would mean a $2 million loss for the Cleveland Public Library in 2026 and 2027.

Also, the library receives $43.5 million of its $83 million budget from property tax levies.