Business fraud
Fake Invoice Scams
Unexpected bills or payment requests — often with attachments — used to steal money or install malware.
What this scam looks like
- Invoice for a product or service you did not order.
- Past-due notice with an attachment or payment link.
- Vendor email with new bank details for payment.
How it usually starts
- Email that looks like a real vendor or subscription renewal.
- Attachment labeled invoice, receipt, or statement.
Why it works
- Businesses receive many invoices — one fake can blend in.
- Attachments can install harmful software when opened.
Warning signs
- Invoice you were not expecting
- Changed payment instructions in email only
- Pressure to pay immediately
What to do
- Do not pay or change bank details based only on the email.
- Verify with the vendor through a known phone number or portal.
- Do not open unexpected attachments — verify first.
What not to do
- Do not send payment to new account details without verification.
- Do not assume the sender is real because the logo looks correct.
What if I already responded?
- Contact the real vendor through a separate channel.
- Tell your bank if payment was sent.
- Report the message to your IT or mail provider.
Not sure about a message?
Paste it into Tater for a plain-English risk check — locally in your browser.
Ask Tater — Analyze a Message