Scammers often send out fake invoices to defraud businesses into paying for services or products they never requested or received. They may also notify a business that a vendor’s information has changed and provide false information in the attempt to defraud.

    1. Contact your financial institution immediately to cancel any payment and explain what has happened.
    2. If you believe this happened because of a phishing attempt, reset account passwords and see our guidance on business email compromise.

  • Review all invoices and payments for unusual activity or changes.
  • Monitor your bank and credit card statements for suspicious activity.
  • Be wary of “recovery scams.” Scammers will often reach out with claims that they are investigating the incident and can get your money back.
  • Report the incident to IC3.gov and BBB Scam Tracker. If possible, file and keep a report from your local police. This may be useful during the investigation.
  • Conduct training and testing with employees to help them recognize signs of phishing and how to handle unusual requests for money or information.