Fake invoices and payment redirection
Detect invoices and payment-change requests designed to redirect company funds.
Why this matters
Invoice fraud often combines a real supplier identity with changed bank details, altered email addresses or urgent payment pressure. Process discipline is the strongest defence.
By the end of this lesson
- Recognise the main warning signs
- Choose a safe verification method
- Know when and how to report the situation
What to notice
- New bank account details in email
- Sender domain differs slightly from the supplier
- Urgent request to avoid late fees
- Invoice number or purchase order is inconsistent
- Reply-to address differs from sender
- Unexpected currency or beneficiary
- Request to keep the change confidential
What to do
- Verify bank changes using a known phone number
- Use dual approval for payment changes
- Compare against supplier master data
- Do not use contact details from the suspicious email
- Pause urgent payments until independently verified
- Report attempted fraud
Frequently asked questions
How should bank-detail changes be verified?
Through a previously known contact and approved change process.
Is a matching company logo enough?
No.
What is the most important control?
Independent verification plus dual approval.
Angvlar Security Awareness