The fake invoice scam is simple because it does not need complicated technology to work. The FTC says scammers send invoices for products or services a business never ordered and hope someone pays the bill without slowing down long enough to check it. The scam succeeds when normal business pressure takes over: there are many emails, a pile of bills, a small team, and a feeling that everything has to be handled now.

That is what makes the fake invoice scam dangerous for small businesses. It blends into routine operations. It does not always arrive with obvious grammar mistakes or dramatic threats. Sometimes it just looks like work.

What the FTC says scammers are sending

The FTC says businesses are receiving fake invoices by mail and email for things they did not order. The invoices might mention tech support, domain registration, search engine optimization services, or other ordinary business expenses. Some use the name of a company the recipient has heard of. Others invent a vendor the business has never actually used. Some even add a “past due” note to create urgency.

That urgency is not an accident. A fake invoice scam works best when the person handling bills assumes someone else approved the purchase.

Why the fake invoice scam works in real offices

Small businesses often operate on trust and momentum. One person may open the mail, someone else may pay invoices, and another person may approve vendors only informally. That can be enough to keep real work moving, but it is also enough to create blind spots.

Scammers count on those blind spots. They do not need a perfect fake invoice. They only need a believable one that lands during a busy day.

How to spot a fake invoice scam before money leaves the account

Use a short review process every time an unfamiliar bill arrives:

1. Check whether the business actually ordered the product or service listed.
2. Confirm that the vendor is already in the approved vendor list or purchasing history.
3. Match the invoice to a real purchase order, contract, renewal, or written approval.
4. Look for urgency language such as “past due,” “final notice,” or pressure to pay immediately.
5. Verify contact information using a source the business already trusts, not the phone number or link printed on the invoice.

Those five steps catch a large share of fake invoice scams before they become payment problems.

What makes a fake invoice especially risky by email

The FTC also warns that some fake invoices sent by email are really phishing attempts. The email may push someone to click a link, open an attachment, or sign in somewhere that steals credentials. That means the fake invoice scam can be both a payment fraud problem and a network security problem.

If an invoice arrives unexpectedly and wants a click before a review, treat it carefully. A payment request should not become a login request unless the business already knows the vendor, the portal, and the workflow.

Build a better accounts-payable habit

The strongest defense against a fake invoice scam is not suspicion all day long. It is process. When the business has a clear system for purchases, vendor approvals, and invoice review, scammers have less room to exploit confusion.

• Require purchase approval before new vendors are paid.
• Keep a simple approved-vendor list.
• Use one place to record renewals and recurring services.
• Train staff to question unexpected invoices instead of “just getting them done.”
• Make it normal to verify first, even when the bill looks routine.

A clear system removes the social pressure that scammers try to create.

What to do if the business already paid a fake invoice

If money already went out, act fast:

1. Contact the bank or payment provider immediately.
2. Document the invoice, the sender, the payment method, and any related emails.
3. Alert internal staff so similar invoices are not paid again.
4. If the invoice came by email, scan the affected devices and review account access.
5. Report the fake invoice scam to the FTC at ReportFraud.ftc.gov.

Speed matters because some payment methods are harder to reverse than others.

FAQ about the fake invoice scam

What is a fake invoice scam?

A fake invoice scam is when a scammer bills a business for products or services it never ordered and hopes someone pays without verifying the charge.

Are fake invoices always obviously fake?

No. Many are built to look routine, which is why process matters more than intuition alone.

Can a fake invoice email also be phishing?

Yes. The FTC warns that some invoice emails are designed to get access to business data and networks, not just to collect payment.

What is the best prevention step?

The best step is a simple, consistent approval and vendor-verification process that staff actually follow.

Bottom line

The fake invoice scam is not about sophisticated deception as much as it is about rushed payment habits. A business that verifies vendors, approvals, and invoice history will stop many of these scams before the money leaves the account.

That is good business systems work, and it is also good security.

Businesses that want practical help cleaning up their digital processes can start at CodeForce.

Source: FTC Consumer Advice: Run a small business? Pay your bills, not scammers