Fake Invoice Scams: How to Spot and Stop Bogus Bills

A fake invoice scam is a bill for goods or services you never ordered, or a genuine-looking invoice with altered payment details. The safest rule is to never pay from the invoice alone: match it to a real order or contract and confirm any bank details through a known contact.

How fake invoices work

Scammers rely on volume and routine. In busy households and offices, bills arrive constantly, and a plausible one can slide through without scrutiny. There are three common versions.

• Invented invoices. A bill for a service that was never provided, such as domain renewals, directory listings, software licenses or cleaning supplies.
• Altered invoices. A real supplier’s invoice is copied, but the bank account number is swapped for the scammer’s.
• Subscription or renewal notices. A message claiming your service is about to expire, with an urgent payment link.

Attackers sometimes target one person, such as an accounts payable clerk or a sole trader who handles everything alone, because that person may feel pressure not to hold up a payment.

Red flags on the invoice itself

• No purchase order, contract or reference to a real order.
• A company name you do not recognize, or one that closely imitates a known supplier.
• Vague descriptions such as “services rendered” or “annual fee”.
• Payment details that differ from previous invoices from the same supplier.
• Generic contact details, a free email address, or no phone number.
• A tight deadline, late fees or threats of service termination.
• A request to pay by gift cards, cryptocurrency or an unusual transfer method.
• A link or attachment that asks you to log in to “view” the invoice.

A verification routine before paying

1. Match it. Is there a purchase order, agreement or order history that matches the amount and description?
2. Check who sent it. Compare the sender address with previous genuine emails from the supplier.
3. Verify bank changes by phone. Use a phone number from your records or an earlier contract, never the one printed on the new invoice.
4. Get a second approval. A second person reviewing payments above a set amount catches many errors and frauds.
5. Pay through known channels. If you usually pay through an official portal, go there directly.

Why changed bank details are the biggest risk

The most damaging version is the altered invoice. If an attacker has access to a supplier’s mailbox, or has watched your email exchanges, they can send a message that looks identical to a normal invoice, apart from the account number. Since the payment goes to a real bank account, it can be difficult to retrieve once sent.

That is why checks should focus on changes. If anything about the payment instructions differs from previous practice, treat it as a trigger for independent verification.

Protecting households and sole traders

Individuals receive fake invoices too, often for services such as home repairs, utility bills or software subscriptions. Keep a simple record of services you actually use, and check any unexpected bill against it. If you work alone, set a personal rule: no first-time payment or bank-detail change without a call to a verified number. Writing the rule down and sticking to it protects you when you are tired or rushed.

If you paid a fake invoice

Act quickly. Contact your bank or payment provider, explain that the payment was fraudulent and ask whether it can be stopped or recalled. Gather the invoice, emails and payment confirmation. Change passwords on any account that may have been exposed, and warn colleagues or the real supplier if their identity was imitated. Then report the fraud to the appropriate authorities in your country.

Building a simple payment policy

A written policy turns good intentions into habits. It does not need to be complicated. For a household, it might be a single rule: never pay a bill that arrived unexpectedly until you have checked it against your own records. For a small organization, a short checklist works well.

• Who can approve payments, and the limit above which a second person must review.
• How supplier details are stored. Keep bank details in one trusted record and require verification before anyone changes them.
• How invoices are received. Use a single mailbox or portal so unusual items stand out.
• What to do with doubtful invoices. Forward them to a named person instead of paying or ignoring them.
• Regular reconciliation. Compare payments made with orders received each month.

Review the policy whenever staff change or a new supplier is added. Scammers often strike during holidays, handovers and busy periods, so the policy matters most when people are stretched.

Frequently asked questions

Can a fake invoice contain malware?

Yes. Attachments or links disguised as invoices are a common way to deliver malware or capture logins. Do not open unexpected invoices; verify first.

What if the invoice names a company I really do business with?

Contact them using a number or email you already have, not the one in the message. Their mailbox may have been compromised.

Is ignoring a fake invoice enough?

Usually yes, but report it, especially if it imitates a real supplier. Do not reply, and do not click unsubscribe links in the message.

Key takeaways

• Never pay an invoice without matching it to a real order or agreement.
• Verify bank detail changes by phone using a known number.
• Use second approvals and pay through trusted channels.
• If you paid, contact your bank immediately and report the fraud.