Learn how to spot a fake invoice or billing scam. Discover 10 warning signs, including unexpected charges, changed bank details, and suspicious payment links.
An invoice can look completely normal and still be fake.
Scammers send invoices for products or services people never ordered, imitate real companies, and sometimes even copy the names and branding of businesses you already know. Some fake invoices are designed simply to get you to send money. Others are part of phishing scams intended to steal passwords, financial information, or access to your accounts. The FTC has specifically warned about unexpected invoices for products or services that were never ordered.
The good news is that you do not have to be an accounting expert to spot many of these scams.
Before paying an unfamiliar invoice, slow down and check who sent it, what it is charging you for, where the payment is going, and whether you can verify the request independently.
Here are 10 warning signs to look for.
The simplest question is often the most useful:
Did I actually order this?
A fake invoice may claim you owe money for software, advertising, technical support, domain registration, subscriptions, business services, deliveries, or something else you do not remember purchasing.
The FTC has warned that scammers send businesses invoices for products and services they never ordered, sometimes making the invoice look like it came from a familiar company.
Do not assume an invoice is legitimate just because it contains your name, company name, address, or other correct information.
Check your order history, previous correspondence, contracts, or account records before paying.
A fake invoice may be marked:
Pressure is useful to scammers because it gives you less time to investigate.
A legitimate bill can certainly have a real deadline, but an urgent message should not stop you from verifying the invoice.
If you were not expecting the bill, take a moment to check it before paying.
The FTC recommends slowing down when someone pressures you to act immediately or make a payment.
An unfamiliar company name does not automatically mean an invoice is fraudulent. You could have forgotten about a purchase, or a legitimate supplier could be using a different billing name.
But an unfamiliar sender deserves verification.
Search for the company independently and check whether its contact information, website, and business details make sense.
Do not rely only on the phone number, website, or email address printed on the invoice.
The FTC recommends checking who you are dealing with when an invoice comes from a company you do not recognize.
This is one of the most important warning signs for businesses and regular customers dealing with recurring suppliers.
Suppose you normally pay a vendor using the same bank account, but a new invoice suddenly says:
"Please use our new bank details for this payment."
That change should be verified independently.
The FBI has described business email compromise schemes in which criminals impersonate businesses or compromise legitimate accounts to redirect payments to fraudulent accounts. The FBI recommends verifying changes to invoice or bank-account information rather than simply following an email request.
Do not assume a familiar sender means the new payment instructions are genuine.
Contact the vendor using previously verified contact information and confirm the change.
A fake invoice may include a button, link, or QR code that takes you to a payment page.
The page may look professional. It might even copy the colors and logo of a legitimate company.
That still does not prove it is genuine.
Instead of using the payment link, open the company's official website or app yourself and check whether the invoice exists there.
This is particularly important when an unexpected invoice arrives by email or text. For more message-level warning signs, see our guide on how to tell if a payment request is a scam.
The FTC advises consumers not to click unexpected links and instead to contact the organization using contact information they know is trustworthy.
Scammers sometimes use addresses that look almost identical to legitimate ones.
For example, a fraudulent sender might use:
billing@company-example.com
instead of the company's genuine domain.
Other warning signs can include:
Do not judge an invoice solely by its logo or appearance.
If the invoice arrived by email, examining the sender address and links can provide useful clues. Our guide on how to check if a suspicious email is really from a company explains this in more detail. For suspicious emails, Scamlify's Email Scam Checker can also provide another layer of analysis.
Check the numbers.
A fake invoice may contain:
Even a small amount should not be ignored simply because it is affordable.
Scammers sometimes use relatively small charges because people may be less likely to investigate them.
Compare the invoice with your order confirmation, contract, previous bills, or account records.
If the amount does not make sense, stop before paying.
Professional design is not proof of authenticity.
A scammer can copy a company's logo, colors, invoice layout, employee name, or other branding.
Look beyond the appearance.
Check whether:
The FTC warns that scammers may make fake invoices look legitimate or appear to come from well-known companies.
Be cautious if someone tells you to ignore your normal payment procedure.
For example:
These instructions are especially concerning when combined with urgency or changed payment details.
Businesses can reduce this risk by having clear procedures for approving invoices and independently confirming unusual payment requests. The FBI has specifically recommended verification procedures for changes involving invoices and payment information.
This is the biggest question to ask before paying:
Can I confirm this invoice without relying on the person who sent it?
If you cannot verify the company, order, service, amount, or payment destination through an independent source, do not rush.
Find the organization's official website yourself.
Use a phone number from a previous legitimate invoice, contract, official account, or trusted website.
Ask the company whether the invoice is genuine.
Do not use contact information contained only in the suspicious invoice to verify the invoice itself.
If you are unsure about an invoice, use this simple process.
Look through your orders, subscriptions, contracts, previous invoices, and account history.
Ask whether the product or service was actually requested.
Look carefully at the sender's email address, company name, website, and contact details.
Small differences can matter.
Compare the invoice number, amount, dates, products, services, and payment information with your own records.
Find the company's official website yourself.
Do not rely solely on links or contact details supplied in the suspicious invoice.
If the bank account, payment method, or billing instructions have changed, contact the organization using previously trusted contact information.
If everything checks out, use the organization's normal payment process.
If something still does not make sense, do not rush to pay.
That can still be a scam.
Scammers may impersonate real companies or use compromised accounts to make fraudulent requests look genuine. The FBI has documented business email compromise schemes where messages appear to come from legitimate sources while directing payments to fraudulent accounts.
This is why verifying the payment destination matters just as much as verifying the company name.
A familiar logo or sender name is not enough.
If payment instructions suddenly change, verify them through a separate trusted channel.
Act quickly.
Contact the bank, card provider, payment service, or other company that handled the transaction and explain that you believe the payment was fraudulent.
If the payment involved a business wire transfer, the FBI recommends contacting the originating financial institution as soon as possible and preserving relevant records.
Keep copies of:
These records may help when reporting the incident.
Also be careful if someone later contacts you claiming they can recover your money for an upfront fee. A promise to recover money can itself be part of another scam.
If you receive an invoice you do not recognize, you do not have to immediately prove that it is fake.
Simply treat it as unverified until you can confirm it.
Do not:
Instead, verify the invoice through an independent source.
For suspicious email invoices, you can also use Scamlify's Email Scam Checker to help examine the message.
Check whether you actually ordered the product or service, whether the sender is genuine, whether the amount is correct, and whether the payment details match your records. Unexpected invoices, pressure to pay, suspicious links, and unexplained changes to payment information are warning signs.
Yes. Scammers can impersonate real businesses, and legitimate accounts can also be compromised. A familiar company name or logo does not by itself prove that an invoice is genuine.
Do not automatically follow the new payment instructions. Contact the business using previously verified contact information and confirm that the bank-account change is genuine before sending money.
If the invoice was unexpected or suspicious, avoid clicking the payment link. Instead, visit the organization's official website or app yourself and check whether the invoice exists there.
Do not pay it simply because it looks official. Check whether the company and charge are legitimate using independently obtained contact information. The FTC specifically advises businesses to examine unexpected invoices for products or services they did not order.
Scamlify can help analyze suspicious email or message content using its available scam-checking tools. However, a tool result should not replace independently confirming the invoice, company, order, and payment details.
A professional-looking invoice is not automatically a legitimate invoice.
Before paying, check four things:
What are you being charged for? Who sent the invoice? Where is the money going? Can you verify all of it independently?
Be especially careful when an invoice is unexpected, creates pressure, contains unusual payment instructions, includes suspicious links, or asks you to send money to a new account.
You do not have to make the decision immediately.
Stop, verify the details through a trusted channel, and only pay after you are confident the invoice is genuine.