The latest figures from UK Finance show that £25m was lost to invoice and mandate scams in the first half of 2024 alone. 78 per cent (£20 million) of these invoice and mandate scam losses occurred on a non-personal or business account.

Yet most cases of invoice fraud could be avoided with one simple anti-fraud measure - calling the supplier.

What is invoice fraud?

Invoice fraud is when fraudsters send an invoice, or a request to pay into a new account, claiming to be from a real business or person you’ve worked with. Sometimes fraudsters are able to hack the emails of your supplier to send the invoice, so the email address is genuine but the payment details are changed to those owned by the fraudster.

Always verify new payment details

Email is not a secure way to send or receive payment details, because email accounts can be hacked. To combat invoice fraud, always check new payment details with your supplier directly before you pay into the new account. Whether you’re setting up a new payee or being asked to update existing payment details – check every time.

It should only take a few minutes to check and verify the payment details by calling your supplier on the number you already have for them, or the number on their website (not the one in the email you’re verifying, in case the fraudster has changed that too).

This simple measure could eliminate almost all cases of invoice fraud.  

It's not just your supplier's emails that can be hacked. Fraudsters can infiltrate your own emails and devices to redirect any payments you should recieve. We recommend following the National Cyber Security Centre's guidance to ensure that you and your devices are protected.

"We’re seeing invoice fraud attacks on our customers. A phone call to the usual contact at the supplier or service provider is all it takes to verify the 'new' bank details and these frauds would have been avoided. Five minutes of your time could make all the difference." - Kirsty McStay, Financial Crime Risk Manager, Triodos Bank

7 useful measures to help prevent fraud

There are several things that you can do to protect yourself from invoice fraud.

Here’s a checklist you can use. If others have access to make payments from your account, share these measures with them and make sure they’re aware of the risks of invoice fraud too:

1. Check invoices carefully
   Anyone who has the authority to pay invoices and change bank details should check supplier names, addresses, invoice amount and bank details to ensure they’re correct.
2. Verify payment details
   Every time you set up a new payee, or if a supplier asks to update their payment details, always verify the payment details with them by calling the number on their website or a previously saved and trusted number that you have for them.
3. Follow up invoice payments
   When you pay an invoice, let the supplier know the payment has been made, confirming the amount and bank details paid into. 
4. Check bank statements carefully
   Report all suspicious debits to your bank immediately.
5. Call suppliers back
   If you receive a phone request to pay an invoice or pay into a new account, say you’ll call the supplier back. Use the number published on their website or the one you previously have saved for them so you know it’s the genuine number you’re calling. Do not call using telephone numbers provided in email chains, as these can be compromised.
6. Be careful what you post online
   Fraudsters often thoroughly research suppliers so that they can convincingly impersonate them. Be aware of information that you publish online, such as on review websites, or recommendations through social media, or supplier lists on your website.
7. Make a small test payment
   Before making a payment to a new account, transfer a small amount first and call the recipient (on the number published on their website) to check that the payment has been received OK.

If you think you may have fallen victim to invoice fraud, contact us right away on 0330 355 0355.