Engineering Company Duped by Invoice Intercept Scam
An established UK engineering firm received what appeared to be a legitimate invoice via email, claiming the supplier had changed their bank account details. The email perfectly mimicked the supplier’s tone and branding. Trusting the correspondence, the firm paid around £50,000 into the new account. A week later, the actual supplier contacted them, unaware of any change — the email had been intercepted, altered, and sent by scammers.
Key takeaways from the case:
The scam involved email interception and editing of invoices.
- The business was not using Confirmation of Payee (CoP), so no warnings were triggered during payment.
- Although their bank rang to confirm the payment, staff unwittingly reassured and approved it.
- The scammy payment was only flagged after the genuine supplier followed up — by then, it was too late.
This case perfectly illustrates how sophisticated invoice fraud can be—and why verifying updated bank details independently is vital.
Source: Financial Ombudsman