Business fraud

Fake Invoice Scams

Unexpected bills or payment requests — often with attachments — used to steal money or install malware.

What this scam looks like

  • Invoice for a product or service you did not order.
  • Past-due notice with an attachment or payment link.
  • Vendor email with new bank details for payment.

How it usually starts

  • Email that looks like a real vendor or subscription renewal.
  • Attachment labeled invoice, receipt, or statement.

Why it works

  • Businesses receive many invoices — one fake can blend in.
  • Attachments can install harmful software when opened.

Warning signs

  • Invoice you were not expecting
  • Changed payment instructions in email only
  • Pressure to pay immediately

What to do

  • Do not pay or change bank details based only on the email.
  • Verify with the vendor through a known phone number or portal.
  • Do not open unexpected attachments — verify first.

What not to do

  • Do not send payment to new account details without verification.
  • Do not assume the sender is real because the logo looks correct.

What if I already responded?

  • Contact the real vendor through a separate channel.
  • Tell your bank if payment was sent.
  • Report the message to your IT or mail provider.

Not sure about a message?

Paste it into Tater for a plain-English risk check — locally in your browser.

Ask Tater — Analyze a Message

← Back to scam guides