Fake Invoices
Fake invoice scams are fraudulent schemes where scammers send falsified invoices to companies or individuals, hoping to trick them into paying for goods or services that were never ordered or delivered. These scams often target busy finance departments and rely on urgency and familiarity to bypass verification processes.
Examples of Fake Invoice Scams
- Unordered Goods Invoice: An email with an invoice attached for products or services that were never ordered, often including a request for immediate payment.
- Overdue Payment Request: A message from a “vendor” warning that payment is overdue, pressuring the recipient to pay promptly to avoid additional fees or service interruptions.
- Vendor Payment Update Scam: An email claiming a known supplier has updated their payment information, with a new bank account number that actually belongs to the scammer.
- Subscription Renewal Notice: An invoice for a subscription renewal that appears to be from a legitimate service provider, often for services the recipient never subscribed to.
Types of Fake Invoice Scams
- Vendor Impersonation: Scammers impersonate a legitimate supplier, using realistic branding and email addresses to request payment.
- Fake Company Scam: Scammers create a fake business name and send invoices for goods or services, banking on the recipient’s failure to recognize the vendor.
- Account Update Fraud: Attackers claim that a vendor’s bank details have changed, providing new (scammer-controlled) payment information for future invoices.
- Subscription or Renewal Scam: A fake invoice for a software subscription or membership renewal, often in the hope that the recipient will assume it’s a legitimate business expense.
How Fake Invoice Scams Work
Fake invoice scams work by exploiting trust within companies and relying on employees to process payments quickly, especially if the payment request appears urgent or legitimate. Scammers may hack a legitimate vendor's email account or create a fake email that closely resembles a known supplier’s, making it harder to detect. They often design invoices to look professional and official, complete with logos, legal disclaimers, and familiar formatting.
These scams are typically aimed at employees in finance or accounts payable, where regular payments are processed. By presenting the invoice as overdue or requiring urgent attention, scammers increase the chances that the recipient will pay without thorough verification.
Common Tactics Used in Fake Invoice Scams
- Sense of Urgency: Scammers use phrases like “urgent” or “overdue” to pressure the recipient into acting quickly.
- Impersonation of Trusted Vendors: Scammers may use email addresses similar to those of known vendors or include realistic branding.
- Bank Account Change Requests: Scammers provide new “bank details” for payments, which actually lead to accounts under their control.
- Low-Value Invoices: Scammers sometimes issue small invoices that don’t raise suspicion and are more likely to be approved without thorough checks.
How to Avoid Fake Invoice Scams
- Verify Invoice Details: Confirm each invoice with the issuing vendor before payment, especially if the invoice is unexpected or the details have changed.
- Establish Verification Policies: Implement a policy requiring verification for new payment details or bank account updates, preferably through a separate communication channel.
- Encourage Employee Awareness: Educate finance and accounts payable teams on common red flags and encourage them to question unusual payment requests.
- Use Vendor Verification Codes: Consider assigning unique vendor codes to approved suppliers to prevent fake vendors from entering your payment process.
- Look for Suspicious Details: Check for slight variations in email addresses, unusual formatting, or inconsistencies in branding that might indicate a fake email.
The Impact of Fake Invoice Scams
Fake invoice scams can lead to financial losses, interruptions in legitimate vendor relationships, and potential legal complications if unauthorized payments are made. For businesses, these scams can also create workflow disruptions, as finance teams must spend time verifying and tracking down false payments.
Interesting Facts About Fake Invoice Scams
- Fake invoice scams cost businesses billions of dollars each year, with small to mid-sized companies often the most affected.
- Fake invoices are one of the most common types of business email compromise (BEC) scams, accounting for a significant portion of financial fraud.
- These scams have increased with remote work, as scammers exploit more decentralized communication and billing processes.