Whilst the precise methods may vary, the essence of APP fraud is that a payer such as a bank account holder (the Payer) consents to a payment to a hitherto unknown third party account.
https://www.mishcon.com/news/briefings/the-regulatory-response-to-authorised-push-payment-fraud-an-update