You open your business email and see an invoice marked PAST DUE. It looks official, the amount isn’t outrageous, and the description sounds like something your business might actually use: website services, domain registration, SEO, advertising, tech support, or another routine business expense. You’re busy, you don’t want your website shut down or an important service canceled, and paying the bill seems easier than stopping everything to investigate it. But that moment of urgency is exactly what can make a fake business invoice scam work. Before you click a payment button, open an attachment, call the number on the invoice, or send a dollar, there are seven things every small-business owner should check.
If you have never heard of this type of scam, you’re not alone. A fake invoice doesn’t always look like the scam messages we’ve learned to recognize. There may be no obvious spelling mistakes, strange promises, or request from a foreign prince. Instead, it can look like an ordinary bill arriving during an ordinary workday, which is what makes it particularly dangerous for a busy business owner.
The Federal Trade Commission issued a warning to small businesses in May 2026 about scammers sending invoices for products and services businesses never ordered. The FTC specifically mentioned invoices involving tech support, domain registration, and search engine optimization services. Some even arrive marked “past due,” creating pressure to pay quickly.
That’s why learning to recognize a fake business invoice scam needs to become part of running a business, even if you are a one-person operation working from your kitchen table.
What Is a Fake Business Invoice Scam?
A fake business invoice scam happens when someone sends a business a bill for something it didn’t order or owe, hoping the person handling the finances will assume the invoice is legitimate and pay it.
That sounds as though it should be easy to catch, but think about how many expenses a small business can accumulate. You may pay for a website, domain name, email service, design software, bookkeeping software, advertising, insurance, equipment, subscriptions, vendor events, shipping services, supplies, payment processing, and dozens of other things.
Now imagine receiving an invoice for “Annual Business Website Services – $149.”
Would you immediately know whether it was legitimate?
A new business owner might think, Maybe this came with my website.
Someone with employees might assume another employee ordered it. A spouse helping with bookkeeping might assume the business owner purchased it. And an owner rushing between customers, orders, emails, and family responsibilities might simply see “past due” and pay it before something supposedly gets canceled.
The FTC says scammers count on exactly this type of confusion. Some invoices impersonate recognizable companies, while others use unfamiliar company names that nevertheless sound legitimate.
Why a Fake Business Invoice Scam Can Look So Convincing
Scammers don’t necessarily need to know everything about your business. Much of the information that makes an invoice appear believable may already be public.
Your business name may be on your website. Your email address may be listed on Facebook or Google. Your website reveals your domain name. State business-registration records may contain additional public information. Your social-media pages may show the services you use, products you sell, events you attend, or platforms where you operate.
A scammer doesn’t have to create the perfect invoice. The invoice only needs to seem plausible enough that you hesitate.
This is also why urgency is such an effective tactic. The FTC’s broader guidance for small businesses warns that scammers commonly create urgency, intimidation, or fear because they want people to act before checking whether the claim is legitimate.
A notice might claim that your domain is about to expire, your account is delinquent, your business listing will disappear, your license requires immediate renewal, or your service will be suspended.
The correct response to that pressure isn’t panic.
It is verification.
7 Things to Check Before Paying a Fake Business Invoice
1. Ask the Simplest Question First: Did I Actually Order This?
Before investigating company logos, invoice numbers, or payment instructions, start with the obvious question:
Did I buy this?
If you’re a one-person business, look through your records. Check previous invoices, receipts, contracts, emails, subscriptions, and bank or credit-card statements.
If other people can make purchases for the business, ask them before paying.
Don’t assume that because an invoice contains your correct business name, address, phone number, or website information, the bill must be legitimate. Public information can make a fake invoice look surprisingly convincing.
This is where even a very simple purchasing system can protect you. Keep records of what you’ve ordered, who the vendor is, how much you agreed to pay, and whether the expense is recurring.
You don’t need complicated accounting software to begin doing this. A spreadsheet, bookkeeping program, or organized business-expense file can give you something to compare against when an unexpected invoice appears.
2. Check Whether You Recognize the Company
An unfamiliar company name deserves investigation before payment.
The FTC recommends searching an unfamiliar company’s name online along with words such as “review,” “scam,” or “complaint” to see what other people have reported.
But don’t stop because the company appears to be real.
A scammer can impersonate a legitimate company.
If the invoice claims to come from a vendor you already use, compare it with a previous legitimate invoice. Look at the company name, mailing address, email domain, account number, payment instructions, phone number, and the way the invoice is formatted.
A small difference can matter.
3. Never Verify a Suspicious Invoice Using the Contact Information on the Invoice
This is one of the most important habits a beginner business owner can learn.
Suppose an invoice says it comes from the company hosting your website and gives you a phone number to call if you have questions. If the invoice is fake, who do you think answers that number?
Potentially the scammer.
Instead, independently locate the company you actually do business with. Use the vendor’s website that you already know, your existing account dashboard, a previous verified statement, or another trusted source.
Then ask whether the invoice is legitimate.
The same principle applies to government-looking notices. The FTC has warned business owners about fake letters using official-sounding agency names and threatening fines or other consequences. Its advice is to verify the agency independently rather than using the phone number or website supplied in the suspicious notice.
4. Look Closely at How They Want You to Pay
Payment instructions can tell you a great deal.
The FTC warns businesses to be particularly cautious when someone demands payment through methods such as wire transfers, cryptocurrency, or gift cards.
Those payment methods should immediately make you stop and investigate.
But don’t assume a familiar payment method automatically makes an invoice safe. Scammers can request card payments, electronic transfers, checks, and other ordinary forms of payment too.
Instead, compare the requested payment method with how you normally pay that vendor. If your website provider has charged the same business credit card automatically for three years, an unexpected email demanding a wire transfer deserves serious scrutiny.
A sudden change in payment instructions is a reason to verify before paying.
5. Pay Attention to Pressure, Threats, and “Past Due” Notices
A legitimate business can certainly send a past-due invoice. The words PAST DUE alone don’t prove something is fraudulent.
What matters is whether the pressure is being used to prevent you from thinking.
A fake business invoice scam may warn that your website will disappear, your business license will be suspended, your trademark will be lost, your utilities will be disconnected, or additional penalties will begin if you don’t pay immediately.
The FTC has documented business scams involving several of these tactics, including people impersonating utility companies, government agencies, technology companies, and trademark-related services.
When an invoice scares you into thinking you have only minutes or hours to act, slow the process down.
Check your records. Verify the sender independently. Confirm the obligation.
Urgency is not verification.
6. Don’t Click the Invoice Just Because You Don’t Plan to Pay It
This part is easy to overlook.
Sometimes the money isn’t the scammer’s only target.
The FTC warns that fake invoices sent by email can actually be phishing attempts designed to gain access to business data or networks.
That means an email saying “Invoice attached” or “Click here to review your overdue balance” may be trying to get you to open a malicious attachment, visit a fake login page, reveal a password, or download something harmful.
If an unexpected invoice looks suspicious, don’t click its links or attachments simply because you’re curious about what it says.
Go directly to the vendor’s legitimate website or account using the address you normally use. If there really is an unpaid balance, you should be able to verify it through your established account or by independently contacting the company.
7. Create an Invoice-Approval Habit Before You Need One
The easiest time to create a fraud-prevention system is before you’re staring at an urgent-looking bill.
The FTC recommends that businesses establish clear procedures for approving purchases and invoices and train staff to check invoices carefully.
Even if you’re the only employee, you can create your own rule:
No unexpected invoice gets paid until I verify the purchase and vendor.
If you have employees or family members helping with the business, decide who is authorized to purchase things and who is authorized to pay bills. Keep vendor records together. Require documentation for unfamiliar charges.
As your business grows, this becomes even more important because scammers can take advantage of confusion between departments or employees.
A simple process can prevent a costly mistake.
A Realistic Fake Business Invoice Scam Example
Imagine you’ve recently launched your first website.
Three months later, an envelope arrives addressed correctly to your business:
DOMAIN SERVICES RENEWAL NOTICE
Amount Due: $189
Payment Required Within 5 Business Days
The document lists your actual domain name.
You remember paying something when you created the website, but you don’t remember exactly what was included. The notice says failure to renew may affect your domain services.
For someone who isn’t comfortable with websites, that sounds serious.
Your first instinct might be, I cannot lose my website.
But instead of paying, you log directly into the account where you originally purchased the domain. Your domain isn’t due for renewal for another nine months, and the company sending the notice has nothing to do with your actual registrar.
That five-minute check just saved you $189.
More importantly, you now understand the process. The next suspicious invoice is less likely to scare you into paying before checking.
That is what financial education for business owners should do. It doesn’t simply tell you “watch out for scams.” It gives you a process for deciding what to do when something questionable actually lands in front of you.
What If You Already Paid a Fake Business Invoice?
If you’ve already paid something and then realize it may have been a fake business invoice scam, act quickly rather than feeling embarrassed and ignoring it.
Contact the bank, credit-card company, payment service, or other financial institution involved and explain that you believe the transaction was fraudulent. Whether the payment can be stopped or recovered depends on the payment method, timing, and circumstances, but contacting the provider quickly gives you the best opportunity to learn what options are available.
You should also report suspected business scams to the FTC through ReportFraud.ftc.gov. The FTC specifically asks businesses to report fake invoices and other scams.
If the invoice came by email and you clicked a link, opened an attachment, entered a password, or provided sensitive information, don’t treat the problem as only a payment issue. Change affected passwords, contact the appropriate financial institutions or technology providers, and evaluate whether business accounts or systems may have been compromised.
The FTC’s Scams and Your Small Business guide also provides broader information about phishing, impersonation scams, tech-support scams, fake checks, bogus business services, and other schemes targeting small businesses.
Why Very Small Businesses Can Be Especially Vulnerable
It is easy to imagine scams as something that only large companies need fraud departments to worry about.
But a one-person business may actually have several vulnerabilities.
You are the owner, purchasing department, bookkeeper, marketing department, customer-service representative, shipping department, and sometimes the person trying to answer business emails while making dinner.
That creates opportunities for mistakes.
A $129 invoice may not seem large enough to investigate when you’re exhausted and trying to clear your inbox. But if scammers send similar invoices to thousands of businesses, they don’t need everyone to pay.
They only need enough people to assume the bill is legitimate.
This is one reason I encourage new owners to create simple business systems early. In The First 10 Steps to Starting a Business Without Feeling Overwhelmed, we talk about separating business and personal money and creating basic systems before trying to build everything at once. Those habits don’t only help with bookkeeping. They also make unusual transactions easier to recognize.
And once you’re ready to bring in customers, How to Find Your First Customers Without Spending a Fortune can help you focus your limited startup dollars on practical customer-building methods instead of feeling pressured to purchase every service marketed to a new business owner.
Create a Simple “Before I Pay” Business Rule
Here’s a rule worth putting near wherever you handle your business finances:
Before I pay an unfamiliar invoice, I will verify three things:
I ordered it.
I know who sent it.
I independently confirmed that I owe it.
That takes very little time.
For recurring vendors, maintain a simple list containing the company name, what you purchase from them, normal billing amount or range, payment method, renewal date if applicable, and official contact information.
Now when something unfamiliar arrives, you have a reference point.
This is particularly helpful for subscriptions because small businesses can accumulate recurring charges quickly. A legitimate invoice can look unfamiliar simply because you forgot about a service you purchased six months earlier.
The goal isn’t to assume every invoice is fraudulent.
The goal is to stop assuming every invoice is legitimate.
Liz Note: Slow Down When Someone Wants Your Money Fast
Small-business owners are constantly told to move faster. Respond faster. Launch faster. Grow faster. Pay the bill before the deadline. Grab the opportunity before it disappears.
But when someone unexpectedly wants money or sensitive information from your business, slowing down can be one of the smartest things you do.
A legitimate vendor should survive the few minutes it takes you to verify an invoice.
If someone is using fear, confusion, or urgency to prevent you from checking, that is even more reason to check.
You are not being difficult.
You are protecting your business.
Join the Conversation: Have You Received a Suspicious Business Invoice?
I would really like to hear from other small-business owners on this one because these scams don’t always look the same. Have you ever received an invoice, renewal notice, email, or letter that looked legitimate at first but turned out to be something you never ordered?
What made you suspicious? Was it the amount, company name, payment method, “past due” warning, or something else?
Share your experience in the comments without posting account numbers, invoice numbers, personal information, or other sensitive details. What you noticed may help another business owner recognize a similar warning sign before they pay.
And if you know someone who recently started a business, send them this article. New owners are learning dozens of systems at once, and knowing that fake business invoice scams exist before the first one arrives can make all the difference.
Frequently Asked Questions About Fake Business Invoice Scams
How can I tell whether a business invoice is fake?
Start by checking whether you actually ordered the product or service and whether you recognize the vendor. Compare the invoice with your existing records and independently contact the legitimate company rather than using the phone number, link, or email address provided on a suspicious invoice. Pressure to pay immediately, unexpected changes in payment instructions, and requests for unusual payment methods are additional warning signs.
Can a fake invoice use the name of a real company?
Yes. Scammers can impersonate legitimate companies or government agencies. That’s why recognizing a company name isn’t enough. Independently access the account or contact the organization using information you already trust.
What should I do with an unexpected invoice email?
Don’t automatically click links or open attachments. The FTC warns that some fake invoice emails are actually phishing attempts intended to access business data or networks. Verify the supposed charge independently first.
Should I pay an invoice if it says “past due”?
Not until you’ve confirmed that the debt is legitimate. Real businesses send past-due notices too, so the phrase itself doesn’t prove a scam. Verify that your business actually purchased the product or service, confirm the vendor, and check your records before paying.
Where can I report a fake business invoice scam?
You can report suspected fraud to the Federal Trade Commission’s ReportFraud site. The FTC says reports can help law enforcement identify patterns and investigate scams.
Final Thoughts: One Verification Can Protect Your Business
Running a small business already gives you plenty to think about. You shouldn’t have to approach every piece of mail or every email assuming someone is trying to steal from you. But you do need a system that keeps an ordinary-looking invoice from becoming an expensive mistake.
When an unfamiliar bill arrives, don’t let a logo, official wording, correct business address, or red PAST DUE notice make the decision for you. Check whether you ordered the service, verify the company independently, compare the invoice with your records, examine the payment instructions, and avoid clicking unexpected links or attachments.
Most importantly, give yourself permission to slow down.
A fake business invoice scam depends on you paying before you verify.
Your protection can be as simple as reversing that order:
Verify first. Pay second.