Scam library
Fake invoice scams: how to spot them
A routine looking bill from a supplier that isn't quite your supplier.
Short answer
A fake invoice scam sends a bill that looks like it's from a real supplier, or says the supplier's bank details have changed, so you pay the scammer instead.
How it works
Fake invoices work because paying bills is boring. Nobody reads the fifth invoice of the day closely, and scammers count on that.
The email looks like it's from a supplier you use, or one that sounds like it could be. It says a payment is overdue, or that their bank details have changed, and asks you to pay today to avoid a late fee.
The money goes to the scammer's account. By the time the real supplier asks why they haven't been paid, it's usually gone for good.
The bank details trap
The most expensive version isn't a fake invoice at all. It's a real-looking message saying "we've changed banks, please update our details before your next payment." Sometimes it even comes from the supplier's real email account after it's been broken into. One changed account number can redirect months of payments.
Red flags
- The sender's address is close to your supplier's, but not the same.
- It says their bank details have changed.
- A same day deadline or a threat of fees or service being cut off.
- An amount, service or order number you don't recognize.
What to do
Never pay or change bank details from an email alone. Call the supplier on a number you already have, from an old invoice or their website, and confirm.
This page is taken from the 3 minute NetMinder lesson staff see straight after clicking a practice email about this scam.