Invoice Fraud

What Is Invoice Fraud? How to Detect Fake Invoices and Prevent Payment Scams

Protect your business from payment scams with bank account verification and smarter processes.

Invoice fraud is one of the fastest-growing threats to UK businesses, costing organisations billions of pounds each year. Whether you’re a small business or a large enterprise, fraudsters are constantly finding new ways to intercept payments and divert funds to illegitimate bank accounts.

At Creditsafe, we help businesses fight back. Our Bank Account Verification tool gives you the confidence that you’re paying the right person or company, before the money leaves your account.

Chapter 1

What is invoice fraud?

Invoice fraud occurs when a fraudster tricks a business into paying a fake or altered invoice, typically by posing as a legitimate supplier or vendor. In many cases, the fraudster will change the bank account details on the invoice so the money ends up in their account instead of the intended recipient’s.

This can happen through:

  1. Email compromise

    Hackers gain access to your supplier’s or your own email accounts and intercept or alter payment communications.

  2. Fake invoices

    Fraudsters create convincing replicas of genuine invoices, complete with logos, signatures, and invoice numbers.

  3. Change of bank detail scams

    Criminals impersonate suppliers and send official-looking emails requesting that future payments be made to a new bank account.

Invoice fraud often goes undetected until it’s too late. Once the funds have been transferred to a fraudulent account, they are often quickly withdrawn or moved, making recovery extremely difficult

For many businesses, a single instance of invoice fraud can:

  • Severely impact cash flow
  • Damage supplier relationships
  • Lead to compliance and audit issues
  • Undermine customer trust

According to UK Finance, businesses lost over £50 million to invoice and mandate scams in a single year, and that’s just the reported cases.

Chapter 1

Real-world example of invoice fraud

Engineering Company Duped by Invoice Intercept Scam

An established UK engineering firm received what appeared to be a legitimate invoice via email, claiming the supplier had changed their bank account details. The email perfectly mimicked the supplier’s tone and branding. Trusting the correspondence, the firm paid around £50,000 into the new account. A week later, the actual supplier contacted them, unaware of any change — the email had been intercepted, altered, and sent by scammers.

Key takeaways from the case:

The scam involved email interception and editing of invoices.

  • The business was not using Confirmation of Payee (CoP), so no warnings were triggered during payment.
  • Although their bank rang to confirm the payment, staff unwittingly reassured and approved it.
  • The scammy payment was only flagged after the genuine supplier followed up — by then, it was too late.

This case perfectly illustrates how sophisticated invoice fraud can be—and why verifying updated bank details independently is vital.

Source: Financial Ombudsman

Chapter 1

How to prevent invoice fraud

There are several steps businesses can take to reduce their risk:

  1. Verify bank details independently – Never accept changes to payment information via email alone.

  2. Use a verification tool – Validate the bank account against the company or individual you’re expecting to pay.

  3. Train your finance team – Help staff spot red flags like urgent payment requests or changes in communication style.

  4. Implement dual approval – Require two people to sign off on any bank detail changes or large transactions.

  5. Review payment processes regularly – Audit your procedures to identify any weaknesses.

Chapter 1

How Creditsafe can help prevent invoice fraud

Invoice fraud is no longer just a finance issue—it’s a business-wide risk. Creditsafe’s Bank Account Verification tool gives you a simple, reliable way to protect your payments and ensure your money goes to the right place.

With Creditsafe, you can instantly check whether a UK bank account is genuinely registered to the company or individual you intend to pay.

Prevent invoice fraud with Bank Account Verification

  1. Confirm bank account ownership

    Instantly verify that the bank account belongs to a legitimate UK business or individual.

  2. Validate new or updated bank details

    Ensure changes to invoices or payment methods aren’t part of a fraud attempt.

  3. Prevent invoice fraud before it happens

    Flag mismatches and suspicious accounts before sending funds.

  4. Reduce manual checks and errors

    Integrate verification into your payment processes for faster, safer approvals.

This tool is built directly into the Creditsafe platform and available via API, so you can carry out checks in real time, integrate seamlessly into your ERP or finance systems and automate due diligence at scale.

Whether you’re paying suppliers, contractors, or customers, bank account verification should be a standard part of your payment process. It’s a simple step that could prevent thousands in losses—and protect your reputation.

Start verifying payments before they leave your business.

Explore Bank Verification

Available for business use only.

Frequently Asked Questions About Invoice Fraud

How do fake invoice scams work?

Fake invoice scams involve fraudsters sending invoices that appear to come from legitimate suppliers. These invoices often include real-looking branding, contact details, and urgent payment terms to pressure finance teams into paying quickly. The goal is to trick the business into transferring funds to a fraudulent bank account. Once the money is sent, it’s often impossible to recover.

How can I identify a fake invoice?

To spot a fake invoice, look for inconsistencies such as unusual payment instructions, unfamiliar email addresses, or contact details that don’t match previous correspondence. Check for poor spelling or formatting, and verify any unexpected changes to bank account details. Always confirm suspicious invoices directly with the supplier using a known contact method.

What are the common red flags of invoice fraud?

Key warning signs of invoice fraud include:

  • A sudden change in payment or bank account details

  • Invoices with rounded totals (e.g., £2,000.00)

  • Duplicate invoices for the same goods or services

  • Slight differences in email addresses or domain names (e.g., .com vs .org)

  • Pressure to pay quickly or outside normal processes

  • Invoices that don’t match purchase orders or delivery records

How do overpayment scams work in invoice fraud?

In an overpayment scam, the fraudster sends an invoice with an inflated amount or pretends to overpay a legitimate invoice. They then request a refund for the “overpaid” amount, which is sent to a fraudulent account. This tactic is used to trick businesses into transferring additional funds after an initial transaction appears successful.

How does invoice fraud affect supply chain security?

Invoice fraud can have a serious impact on supply chain operations. If payments are misdirected, legitimate suppliers may halt deliveries, leading to delays, lost revenue, and damaged relationships. Rebuilding trust and restoring supply chain stability after a fraud incident can be time-consuming and costly.

What is ‘invoice mirroring’ in fraud schemes?

Invoice mirroring is when a scammer creates a nearly identical copy of a legitimate invoice from a trusted vendor. They may replicate logos, formatting, and even invoice numbers to make the fake invoice appear genuine. The goal is to deceive businesses into paying the fake invoice instead of the real one.

How do I Report Invoice or Payment Fraud?

If you suspect that your business has fallen victim to invoice fraud or a payment scam, it’s essential to act promptly. Here’s what to do:

1. Contact Your Bank Immediately
Inform your bank or payment provider as soon as you notice the fraud. If the funds haven’t yet cleared, there may still be a chance to stop or recover the payment.

2. Report the Fraud to Action Fraud (UK)
Action Fraud is the UK’s national reporting centre for fraud and cybercrime.

  • Website: www.actionfraud.police.uk
  • Phone: 0300 123 2040 (Monday to Friday, 8am – 8pm)
  • You’ll receive a police crime reference number after reporting.

3. Inform Your Internal Teams
Notify your finance, procurement, and IT/security teams to prevent repeat incidents and allow them to investigate further.

4. Notify the Genuine Supplier
If the scam involved impersonation of a known vendor, contact them immediately to alert them. They may also need to warn other customers.

5. Preserve All Evidence
Keep copies of emails, invoices, payment records, and any correspondence. These are crucial for investigations by banks, law enforcement, and insurance.

6. Report to the National Cyber Security Centre (NCSC)
If the fraud involved phishing or spoofed emails, you can also report it to the NCSC: