How Attackers Use Fake Invoices to Get Small Businesses to Pay

Fake invoices are a common scam that takes advantage of the way businesses handle payments. These scams often involve sending a document that looks exactly like a real invoice, but it’s designed to get the recipient to transfer money to a fraudulent bank account. The goal is to trick the business into paying a fake invoice, often under the guise of an urgent or time-sensitive request.

What a Fake Invoice Looks Like

A fake invoice is usually sent via email and mimics a real invoice from a known vendor or client. It includes all the standard details: company name, invoice number, due date, and payment instructions. The email might look professional, with a subject line that creates a sense of urgency, such as "Urgent Payment Required" or "Invoice for Services Rendered."

• The sender's email address might be slightly different from the real one, such as using a similar domain (e.g., "suppliersinc.com" vs. "suppliersinc.org").
• The invoice might include a fake logo or a slightly altered version of the real company's branding.
• The payment instructions often direct the recipient to a bank account that is not associated with the real company.

Why Small Businesses Are Targets

Small businesses are especially vulnerable to fake invoices because they often have less time to verify payments and may not have the same level of financial controls as larger companies. Attackers know that small businesses are more likely to pay invoices quickly, especially if the request seems legitimate.

In some cases, the scammer might even impersonate a trusted vendor or client, making it harder to detect the fraud. The scammer might also use social engineering tactics, such as claiming the invoice was sent by mistake or that there's a mistake in the payment details.

How to Spot a Fake Invoice

There are several red flags that can help you identify a fake invoice:

• Check the sender's email address carefully. A slight change in the domain or the sender's name can be a sign of a scam.
• Verify the invoice number and date against the company's records. If you're unsure, contact the vendor directly using a phone number you know is genuine.
• Look for formatting issues or typos in the invoice. These can be subtle but are often present in fake documents.
• Confirm the payment details with the vendor before sending any money. Always use a verified method of communication.

What to Do If You Suspect a Fake Invoice

If you believe you've received a fake invoice, act quickly. Do not send any money. Contact the vendor using a known phone number or email address. If you've already sent money, report the scam to your bank and contact local authorities.

Being cautious with payments and verifying all details can help protect your business from falling victim to fake invoice scams. Stay alert, and always double-check before sending money.