Learn / How to spot a fake invoice
Security

How to spot a fake invoice

Invoice fraud is one of the most common financial scams targeting small businesses. Here is what to look for before you pay.

Invoice fraud is one of the most common financial scams targeting freelancers and small businesses. A convincing fake invoice can land in your inbox looking like it's from a real supplier — correct logo, plausible amount, familiar format. Knowing what to check before you pay can stop a scam before it costs you money.

1

Check the sender's email address carefully

Fraudsters often register domains that look almost identical to a real supplier's — one letter changed, a hyphen added, or a different TLD. The display name in your email client may say the right thing while the actual address is entirely different.

Look at the full email address, not just the name. If an invoice from "Acme Hosting" comes from billing@acme-hosting.net when you've always dealt with billing@acmehosting.com, that's a red flag. A one-character difference is all a scammer needs.

2

Verify the invoice against your own records

Before paying anything, confirm the invoice corresponds to something you actually ordered or agreed to. Ask yourself:

  • Did I order these goods or services?
  • Does the amount match what was agreed?
  • Does the supplier name match someone I actually work with?
  • Is there a purchase order, contract, or previous email that confirms this?

Fake invoice scams rely on volume and busyness — a scammer sends hundreds of plausible-looking invoices hoping someone pays without checking. Slowing down and verifying is the single most effective defence.

3

Watch for sudden changes to payment details

One of the most common attacks is intercepting a legitimate supplier relationship and sending an email claiming their bank details have changed. The invoice looks real — same format, same branding — but the account number is now the scammer's.

Never update payment details based solely on an email. If a supplier contacts you to change their bank account, call them back on a number from your existing records — not a number provided in the same email.
4

Be sceptical of urgency

Pressure to pay immediately is a classic fraud signal. Phrases like "payment overdue", "account suspended", "final notice", or "pay within 24 hours to avoid penalties" are designed to make you act before you think. Legitimate suppliers send invoices with normal payment terms and follow up politely.

If an invoice creates urgency you weren't expecting, that's a reason to slow down and verify — not to speed up.

5

Look for inconsistencies in the invoice itself

Fraudsters often work quickly and make small mistakes. Things to check on any suspicious invoice:

  • Spelling errors in the company name, your name, or the description
  • A logo that looks slightly off — blurry, wrong colours, or lower resolution than expected
  • An invoice number that doesn't follow the pattern of previous invoices from the same supplier
  • A VAT or GST number that doesn't match what you've seen before (you can verify UK VAT numbers at gov.uk)
  • Generic contact details — a mobile number instead of a business line, a Gmail address instead of a company domain
6

When in doubt, verify by phone

If something feels off, call the supplier directly using a number from your own records or their official website — not from the invoice or email in question. A quick call takes two minutes and confirms whether the invoice is genuine. Most legitimate suppliers will understand and appreciate the diligence.

If you've already paid a fraudulent invoice, contact your bank immediately. The faster you act, the better the chance of recovering the funds. Report the fraud to Action Fraud (UK), the FTC (US), the ACCC (Australia), or your relevant national authority.

Slow down. Check first. Pay once.

Fraudsters rely on speed and distraction. A few seconds of verification is usually all it takes to catch a fake before any money moves.