Invoice fraud
Updated 2026-09-29
Invoice fraud happens when a scammer sends a fake invoice, or alters a genuine one, usually changing the bank account details, so payment intended for a real supplier ends up in the scammer’s account instead. It often follows a compromised email account belonging to either side of the transaction.
When it matters
Always verify any change to a supplier’s bank details by phone, using a number you already have on file rather than one in the email, before paying. If you already paid a fraudulent invoice, contact your bank about a bank recall immediately, since this scam is closely related to business email compromise and often needs to be reported the same way.
Read next
APK scam: what to do right now
If you installed an app from a link and your phone or banking now looks wrong, here is what to do in the next few minutes to limit the damage.
Read thisBusiness email compromise: what to do
A supplier or director email asked you to pay a changed bank account. Here is how business email compromise works and the fastest response.
Read thisCrypto scam: what you can do
If a crypto exchange or wallet blocks your withdrawal after you met the operator on a chat app, here is how to trace what happened and what to do next.
Read thisWhat to do right after a scam
If you just realised you sent money to a scam, here is the order of first actions: stop paying, call your bank, call 997, and report it.
Read this