Scammers often send out fake invoices to defraud businesses into paying for services or products they never requested or received. They may also notify a business that a vendor’s information has changed and provide false information in the attempt to defraud.
-
- Contact your financial institution immediately to cancel any payment and explain what has happened.
- If you believe this happened because of a phishing attempt, reset account passwords and see our guidance on business email compromise.
- Review all invoices and payments for unusual activity or changes.
- Monitor your bank and credit card statements for suspicious activity.
- Be wary of “recovery scams.” Scammers will often reach out with claims that they are investigating the incident and can get your money back.
- Report the incident to IC3.gov and BBB Scam Tracker. If possible, file and keep a report from your local police. This may be useful during the investigation.
- Conduct training and testing with employees to help them recognize signs of phishing and how to handle unusual requests for money or information.