Fake Invoice Scam: How to Spot Fraudulent Bills
An accounting clerk at a mid-size manufacturing company processed 200-300 invoices per month. One Tuesday morning, an invoice arrived from what appeared to be a regular office supply vendor — $847.50 for printer toner and paper. The invoice format matched previous invoices from the vendor, the company name was correct, and the amount was reasonable. She processed the payment. The real vendor had never sent that invoice. The bank account on it belonged to a fraudster in another state. It was one of fourteen fake invoices sent to different companies that week from the same operation.
How Fake Invoice Scams Work
The strategy is simple and effective: send an invoice that looks legitimate, for an amount that's low enough not to trigger extra scrutiny, to a company large enough that the accounts payable department processes too many invoices to verify each one individually. The scammer bets on volume — send enough fake invoices and some will get paid.
The cold invoice. The most basic version. The scammer sends invoices to random businesses for fictitious services — "annual website directory listing," "domain renewal," "advertising placement," or "office supplies." The invoice looks official and includes a due date, payment terms, and late fee warnings. Many businesses pay small invoices without verifying whether the service was actually received.
The vendor impersonation. More sophisticated scammers research a company's actual vendors (through public records, LinkedIn, or hacking the company's email) and send invoices that closely mimic real ones. The company name, logo, and format match the real vendor. Only the bank account details are different.
Think it might be a scam?
Paste it here for a free, instant verdict.
Free · No signup required · Cmd+Enter to scan
The inflated or duplicate invoice. The scammer intercepts a real invoice (by compromising the vendor's email or the target's email) and sends a modified version with a higher amount or different bank details. Or they simply re-send a legitimate invoice that's already been paid, changing the bank details, hoping it gets paid again as a duplicate.
Red Flags That Reveal Fake Invoices
No purchase order reference. Legitimate vendors typically reference the purchase order number associated with the goods or services. A blank or missing PO field on an invoice is a warning sign.
Unfamiliar vendor name. If your company doesn't have an existing relationship with the vendor, and no one authorized the purchase, the invoice is likely fraudulent. Cross-reference every invoice against your vendor list.
Changed bank details. If a known vendor's invoice suddenly shows different bank account information, verify before paying. Call the vendor on a number you have on file (not from the invoice) and confirm the change.
Vague service descriptions. "Consulting services — Q1," "Annual maintenance," or "Professional services rendered" without specific deliverables are common on fake invoices because the scammer doesn't know what services you actually use.
Pressure tactics. "PAST DUE — pay immediately to avoid collections" or "Late fee of 15% will be applied after 5 days" are designed to rush payment without verification. Legitimate vendors with outstanding invoices will call you and work with you — they don't threaten collections on a first notice.
Slightly wrong details. The company name might be "Office Supply Depot" instead of "Office Supply Depot Inc." The address might be slightly different. The logo might be low-resolution. These small discrepancies indicate the scammer copied the vendor's identity imperfectly.
Invoice Fraud by the Numbers
The Association of Certified Fraud Examiners estimates that businesses lose 5% of revenue annually to fraud, with billing schemes being the most common type. Small and mid-size businesses are disproportionately affected because they often lack the internal controls of larger organizations. A single fake invoice for $500-2,000 is small enough to fly under the radar but profitable when multiplied across hundreds of targets.
How to Protect Your Business
Maintain a verified vendor list. Every invoice should be matched against an approved vendor database. Invoices from vendors not in the system should be flagged for manual review and not paid until the vendor relationship is confirmed.
Require purchase order matching. Implement three-way matching: every payment requires a matching purchase order, a receiving report confirming the goods or services were delivered, and the invoice itself. If any element is missing, the payment is held.
Verify bank account changes. Any change to a vendor's bank details should be confirmed through a phone call to the vendor using a previously verified phone number. Never rely on contact information provided in the email or invoice requesting the change.
Segregate duties. The person who approves vendors should not be the same person who processes payments. The person who receives goods should not be the same person who matches invoices. Separation of duties creates natural checkpoints that catch fraud.
Regular audits. Periodically review paid invoices for anomalies — duplicate payments, payments to new vendors, payments without matching purchase orders, and payments where bank details recently changed.
Fake invoices succeed because of speed and volume. Slowing down the payment process with verification steps eliminates the scammer's advantage.
Received something suspicious? Check it now for free →