Invoice scam: recovering a diverted payment
Your supplier's invoice arrived with changed bank details, and the payment already left.
Updated 2026-09-29 · Independent resource. Legal review pending.
Can a payment sent on a fake invoice be recovered
Recovery is most realistic within the first day, before the receiving account is emptied. An invoice diversion scam usually leaves a clear paper trail, since the fraudulent invoice itself becomes part of the evidence.
Contact your bank the moment you suspect the invoice was fake, and ask about a recall or a hold on the receiving account. No outcome can be promised, but speed improves the odds.
This is a variant of business email compromise, where a changed detail rather than a changed sender carries the fraud.
The bank recall attempt
Call your bank as soon as the discrepancy is noticed, and give them the transfer date, amount, and receiving account. Ask specifically about a recall, since this window narrows quickly.
Do this in parallel with, not instead of, verifying the supplier separately. Both steps can happen on the same day.
If the transfer was very recent, call the National Scam Response Centre on 997 as well.
Verifying the real supplier
Call the supplier on a number you already have, from an old invoice or your own contact records, never one from the new email. Ask them to confirm the account change out loud.
This call also clarifies whether the genuine supplier has actually been paid or is still owed. Keep paying the real supplier separately once their real account is confirmed, so the underlying business relationship is not lost as well.
A supplier who resists this kind of verification is worth treating with caution.
Reporting and preserving the evidence
Make a police report with the fake invoice, the email headers, and the payment record attached. This gives the Commercial Crime Investigation Department (CCID) what it needs to trace the receiving account.
Keep the original supplier’s genuine invoices for comparison, since the difference between the two often centres on one changed line.
Note the exact time the fraudulent invoice arrived and when payment was sent, since this timeline helps investigators and a bank move faster.
Civil claim considerations and what to do next
For a meaningful business amount, a civil claim against a scammer becomes worth exploring once the receiving account is identified. An honest look at whether legal action is worth it weighs this against the likely cost.
Legal help after a scam explains what a lawyer can add once your bank and police reports are filed. Recall the payment, verify the supplier, then report, in that order, on the same day if possible.
If a supplier invoice changed its bank details and your business already paid, tell us what happened and we will help you see the realistic next step.
Common questions
We paid the new account before anyone checked it by phone. What is the first step now?
Contact your bank immediately and ask about a recall on the transfer before doing anything else. Speed matters more than the amount involved, so acting the same day gives your business the best realistic chance of stopping the funds in time.
How do we know whether the real supplier ever received a partial payment?
Contact the supplier directly, using a number from an old invoice rather than the compromised email thread, and reconcile what they actually received against what was invoiced. This call also confirms their genuine bank details for any future payment you make.
Is it worth pursuing a civil claim if the amount was significant for our business?
It can be, once the receiving account is identified and reasonably traceable to a real person or business. A first assessment weighs the cost of pursuing a claim against the amount involved, which matters more for a larger business payment.
Read next
Suing a scammer: what a claim needs
If you are considering a civil claim against a scammer or the account holder who received your money, here is what the claim needs and what to expect.
Read thisInvoice diversion scam: what to do
A supplier invoice arrived with new bank details and the payment already went out. Here is how invoice diversion works and what to check first.
Read thisBusiness email compromise: what to do
A supplier or director email asked you to pay a changed bank account. Here is how business email compromise works and the fastest response.
Read thisLegal help after a scam: how it works
Here is what a qualified lawyer can and cannot do after a scam, what a first assessment covers, and how this site connects you to one.
Read thisIf a supplier invoice changed its bank details and your business already paid, tell us what happened and we will help you see the realistic next step.