608 expert-designed tasks grounded in real fraud cases, 152 attack scenarios across 14 domains; all seven multimodal models tested were vulnerable, with attack success rates of 7.1% to 34.5%, and adding forged multimodal content raised success from 19.9% to 29.2% despite more proactive verification.