Angvlar Security Awareness Angvlar Security Awareness
← All lessons
Finance fraudMedium7 min

Fake invoices and payment redirection

Detect invoices and payment-change requests designed to redirect company funds.

Why this matters

Invoice fraud often combines a real supplier identity with changed bank details, altered email addresses or urgent payment pressure. Process discipline is the strongest defence.

By the end of this lesson

  • Recognise the main warning signs
  • Choose a safe verification method
  • Know when and how to report the situation

What to notice

  • New bank account details in email
  • Sender domain differs slightly from the supplier
  • Urgent request to avoid late fees
  • Invoice number or purchase order is inconsistent
  • Reply-to address differs from sender
  • Unexpected currency or beneficiary
  • Request to keep the change confidential

What to do

  • Verify bank changes using a known phone number
  • Use dual approval for payment changes
  • Compare against supplier master data
  • Do not use contact details from the suspicious email
  • Pause urgent payments until independently verified
  • Report attempted fraud

Frequently asked questions

How should bank-detail changes be verified?

Through a previously known contact and approved change process.

Is a matching company logo enough?

No.

What is the most important control?

Independent verification plus dual approval.

Build safer habits across your organisation.

Angvlar Security Awareness combines authorised simulations, practical training and privacy-conscious reporting.

Talk to Angvlar