You open your business email and see an invoice marked PAST DUE. It looks official, the amount isn’t outrageous, and the description sounds like something your business might actually use: website services, domain registration, SEO, advertising, tech support, or another routine business expense. You’re busy, you don’t want your website shut down or an important service canceled, and paying the bill seems easier than stopping everything to investigate it. But that moment of You open your business email and see an invoice marked PAST DUE.
The amount is not outrageous. The company name sounds legitimate. The description says something your business might actually use, such as website services, domain registration, advertising, SEO, tech support, office supplies, or another routine expense.
For a moment, you wonder whether you forgot about it.urgency is exactly what can make a fake business invoice scam work. Before you click a payment button, open an attachment, call the number on the invoice, or send a dollar, there are seven things every small-business owner should check.
Maybe you are busy filling orders, answering customers, handling paperwork, preparing for an event, or trying to keep up with everything else that comes with running a small business. Paying the bill and moving on would certainly be easier than stopping to investigate it.
That moment of confusion and urgency is exactly what can make a fake business invoice scam work.
The Federal Trade Commission warns that scammers send businesses invoices for products or services they never ordered. Some invoices impersonate recognizable companies. Others use unfamiliar company names that simply sound official. Some even arrive marked “past due” to make the business owner feel pressure to pay quickly.
Before you click a payment button, open an attachment, call the number printed on the invoice, or send any money, slow down.
There are seven things you should check first.
Why a Fake Business Invoice Scam Can Be Easy to Miss
You may be thinking, I would know if I ordered something.
But consider how many different expenses a small business can accumulate.
You may pay for a domain name, web hosting, business email, design software, bookkeeping software, insurance, subscriptions, advertising, shipping services, payment processing, vendor events, supplies, equipment, printing, licenses, apps, and other services.
Now imagine receiving an invoice that says:
Annual Business Website Services: $149
Would you immediately know whether it belonged to something you purchased?
A new business owner might assume it came with the website. Someone helping with bookkeeping may assume the owner ordered it. An employee may think another employee approved it.
That uncertainty is useful to a scammer.
The FTC explains that scammers often hope the person handling the bills simply assumes the invoice is legitimate and pays it.
The answer is not to become suspicious of every bill that arrives.
The answer is to create a habit of verification before payment.
7 Things to Check Before Paying an Unexpected Business Invoice
1. Ask the Simplest Question First: Did I Actually Order This?
Before analyzing logos, invoice numbers, account numbers, or payment instructions, begin with the most basic question:
Did my business actually purchase this product or service?
Check your receipts, purchase confirmations, contracts, emails, previous invoices, credit-card statements, subscriptions, and business records.
If someone else is allowed to make purchases for the business, ask them before paying.
Do not assume an invoice is legitimate simply because it contains your correct business name, address, telephone number, website, or email address. Much of that information may already be publicly available.
This is also one reason basic business organization matters.
A simple record showing what you purchased, the vendor, the agreed price, the payment method, and whether the expense renews can make an unfamiliar invoice much easier to investigate.
If you are still building the basic systems for your business, The First 10 Steps to Starting a Business Without Feeling Overwhelmed walks through organizing business finances and keeping business activity manageable from the beginning.
2. Check Whether You Recognize the Company
An unfamiliar company name deserves investigation.
The FTC recommends searching the company name online along with words such as review, scam, or complaint when you receive an invoice from a business you do not recognize.
But recognizing the company name does not automatically make the invoice legitimate either.
Scammers can impersonate real companies.
If the invoice appears to come from a company you already use, compare it with an earlier legitimate invoice.
Look at the company name, email domain, mailing address, account information, invoice format, phone number, payment instructions and the service being billed.
Suppose you normally pay your web-hosting company $18.99 per month by automatic credit-card payment. Suddenly, you receive an emailed invoice demanding a $299 annual payment through a completely different method.
That deserves a second look.
A familiar logo should never replace verification.
3. Do Not Verify a Suspicious Invoice Using the Contact Information on It
This is one of the most important habits a business owner can develop.
Suppose an invoice claims to be from the company hosting your website. At the bottom it says:
Questions? Call this number immediately.
If the invoice is fraudulent, the person answering that number may be the scammer.
Instead, independently locate the real company.
Use the website address you already know, sign into your normal account dashboard, check an earlier verified statement, or use another contact method you already trust.
Then ask whether the invoice is legitimate.
The same rule applies when something claims to come from a government agency, utility company, trademark service, technology company, bank, or another organization that could make you nervous about ignoring the notice.
The FTC warns that business scammers commonly impersonate companies and government agencies because people are more likely to cooperate when the request appears to come from an organization they trust.
Do not let the invoice tell you how to verify the invoice.
Verify it independently.
4. Look Carefully at How They Want You to Pay
Payment instructions can provide important warning signs.
The FTC advises businesses to be especially cautious when someone demands payment through methods such as gift cards, cryptocurrency, or wire transfers.
But ordinary payment methods do not automatically make an invoice safe.
A scammer may still request payment by card, check, electronic transfer, or another familiar method.
Instead, compare the request with your normal relationship with that vendor.
Has the payment method suddenly changed?
Is the bank account different?
Are you being told to send the payment to a person instead of the company?
Does the invoice say your normal payment system is temporarily unavailable?
If something has changed unexpectedly, verify it before sending money.
This same principle applies outside invoice scams. In Side Hustle Scams: 9 Red Flags Before You Lose Money, we discuss why unexpected payments, unusual payment requests, and pressure involving money deserve extra scrutiny.
5. Pay Attention to Pressure, Fear, and “Past Due” Notices
A legitimate company can certainly send a past-due notice.
The words PAST DUE do not automatically mean an invoice is fraudulent.
The warning sign is what happens around those words.
A fake business invoice scam may claim that your website will be shut down, domain name will expire, business listing will disappear, utilities will be disconnected, license will be suspended, trademark will be lost, or additional penalties will begin unless you pay immediately.
The goal is to make the consequence sound serious enough that you react before checking.
The FTC identifies urgency, intimidation, and fear as common tactics used in scams targeting businesses.
So when an unexpected invoice is trying very hard to make you panic, do the opposite.
Slow down.
Check your records.
Log into the legitimate account.
Contact the company independently.
Verify that you actually owe the money.
Urgency is not proof that a bill is legitimate.
6. Do Not Click an Invoice Just Because You Are Curious
Sometimes the scammer is not only trying to get the invoice paid.
The invoice itself may be bait.
The FTC warns that fake invoice emails can also be phishing attempts designed to gain access to business information or networks.
An email may say:
Invoice attached.
Click here to review your overdue balance.
Sign in to dispute this charge.
Download your statement.
Clicking could take you to a fake login page, expose your password, download malicious software, or give a criminal access to information that has nothing to do with the supposed invoice.
CISA also advises people to be cautious with unexpected links and attachments and to independently contact an organization when a suspicious message appears to come from a trusted source.
Instead of clicking the invoice email, open a new browser window and go directly to the company’s website using the address you normally use.
If there is truly an unpaid balance, you should be able to verify it through your legitimate account or by contacting the company independently.
7. Create an Invoice-Approval Rule Before You Need One
You do not need a large accounting department to have a basic payment procedure.
Even if you run the business by yourself, create one simple rule:
No unexpected invoice gets paid until the purchase and vendor are verified.
If employees, a spouse, family members, or a business partner sometimes purchase items for the business, decide who can approve purchases and who can pay invoices.
Keep records of recurring vendors.
You might record the vendor name, what you purchase, normal price or price range, renewal date, payment method and official contact information.
This becomes increasingly valuable as the business grows.
The FTC recommends having clear procedures for approving purchases and invoices and training anyone who handles payments to inspect invoices carefully.
A small system can prevent a very expensive mistake.
Create a Simple “Before I Pay” Rule
Before paying an unfamiliar business invoice, verify these three things:
- I ordered it.
- I know who actually sent it.
- I independently confirmed that I owe the money.
If you cannot confirm all three, stop.
Do not allow an invoice deadline to make the decision for you.
This does not mean every unexpected invoice is fraudulent. Sometimes a legitimate renewal, subscription, annual fee, or purchase really was forgotten.
The point is that you confirm the obligation rather than guess.
What If the Invoice Looks Completely Professional?
This is where many people get caught.
A scam does not have to look poorly made.
A professional logo, invoice number, business address, account number, barcode, website address, customer-service phone number, legal language, or polished design does not prove that the invoice is genuine.
Technology has made professional-looking documents easier to create.
The better question is not:
Does this look real?
It is:
Can I independently prove that this is real?
That is a much stronger standard.
What If the Invoice Uses a Real Company’s Name?
Treat it exactly the same way.
Do not use the phone number, button, website link, or email address included in the suspicious message.
Go directly to the company’s legitimate website or account that you normally use.
A scammer impersonating a recognizable company is relying on you trusting the company name.
Verification breaks that advantage.
What If You Already Paid the Fake Invoice?
Act quickly.
Contact the bank, credit-card company, payment service, or other financial institution used to send the money. Explain that the transaction may have resulted from fraud and ask what options are available.
The appropriate next step can depend on how the money was sent and how much time has passed.
You should also preserve the invoice, email, envelope, sender information, payment records, screenshots, phone numbers and other evidence rather than immediately deleting everything.
Report suspected fraud to the Federal Trade Commission through its official reporting system. The FTC says reports help law enforcement identify patterns and investigate fraud.
Report fraud to the Federal Trade Commission
If clicking the invoice may also have exposed a password or account, change compromised credentials through the legitimate account and consider enabling multifactor authentication. CISA recommends MFA as an additional security layer for business accounts, particularly accounts involving sensitive data.
Protect the Business Without Becoming Afraid of Every Invoice
The goal of this article is not to make you suspicious of every vendor.
Businesses have bills.
Legitimate companies send invoices.
Sometimes you really did forget a renewal date.
The goal is to build one extra step between receiving an unfamiliar request for money and sending the payment.
That step is verification.
The more organized your business becomes, the easier that verification gets.
If you know what you bought, who you bought it from, when it renews, what it normally costs, and how it is usually paid, something unusual becomes much easier to spot.
Liz’s Note: Slow Down When Someone Wants Your Money Fast
Small-business owners hear the word fast constantly.
- Launch faster.
- Respond faster.
- Grow faster.
- Pay before the deadline.
- Grab the opportunity before it disappears.
- Sometimes moving quickly is useful.
But when someone unexpectedly wants money, account information, passwords, or financial information from your business, slowing down can be one of the smartest things you do.
A legitimate vendor can survive the few minutes it takes for you to verify an invoice.
And if someone is deliberately using fear, confusion, or urgency to stop you from checking?
That gives you even more reason to check.
You are not being difficult.
You are protecting what you are building.
Frequently Asked Questions About a Fake Business Invoice Scam
How can I tell if a business invoice is fake?
Start by confirming that your business actually ordered the product or service. Check your records and determine whether you recognize the vendor. If anything is uncertain, independently contact the company using information you already trust instead of the phone number or links contained in the suspicious invoice.
Can a fake business invoice scam use the name of a real company?
Yes. Scammers can impersonate legitimate companies, service providers and government agencies. A recognizable logo or company name does not prove that the invoice came from that organization.
Should I open an invoice attachment to see what it is?
Not if the email is unexpected or suspicious. Fake invoice emails may also be phishing attempts. Verify the supposed charge independently before clicking links or opening attachments.
Is every past-due invoice a scam?
No. Legitimate vendors send past-due notices too. Confirm whether your business purchased the product or service and whether the vendor and amount match your records before paying.
What if an invoice has my correct business information?
That does not prove it is legitimate. Business names, websites, addresses, phone numbers and other information may be publicly available. Verify the underlying purchase rather than relying on the information printed on the invoice.
Where should I report a fake business invoice scam?
Suspected fraud can be reported to the Federal Trade Commission through ReportFraud.ftc.gov. The FTC also provides free guidance specifically for scams targeting small businesses.
FTC resources for scams targeting small businesses
Final Thoughts
A fake business invoice scam works best when the business owner is busy, confused, rushed, or afraid that something important will happen if the bill is not paid immediately.
That is why your strongest defense can be surprisingly simple.
- Stop before paying.
- Ask whether you ordered it.
- Check your records.
- Verify the company independently.
- Look at the payment instructions.
- Do not click suspicious links or attachments.
- And never allow an unexpected demand for money to rush you past the verification process.
You worked too hard for your business money to send it away simply because an invoice looked official.
When something does not look right, check first.
Five minutes of verification may save you from weeks or months of dealing with a financial mistake.