Business scam guide

Business invoice fraud

Business invoice fraud compromises email or impersonates vendors to change bank details, send fake invoices, or redirect payments. Confirmation through a known channel is essential.

Risk signal

Invoice switch

Severity

critical

Group

Business

Common identifiers

Add identifiers that can be matched safely across reports, profiles, payments, and evidence without exposing unnecessary private data.

01

Vendor email

Use the exact vendor email shown by the scammer so CheckKaroo can link repeat signals and avoid weak matches.

02

Invoice

Use the exact invoice shown by the scammer so CheckKaroo can link repeat signals and avoid weak matches.

03

Bank account

Use the exact bank account shown by the scammer so CheckKaroo can link repeat signals and avoid weak matches.

04

Domain

Use the exact domain shown by the scammer so CheckKaroo can link repeat signals and avoid weak matches.

Evidence to preserve

Keep proof in original form where possible. Screenshots help, but transaction IDs, URLs, timestamps, and chat context make moderation stronger.

01

Email headers

Capture email headers with date, time, sender, URL, or transaction context visible where possible.

02

Invoice PDF

Capture invoice pdf with date, time, sender, URL, or transaction context visible where possible.

03

Bank detail change request

Capture bank detail change request with date, time, sender, URL, or transaction context visible where possible.

04

Payment proof

Capture payment proof with date, time, sender, URL, or transaction context visible where possible.

First response

These steps reduce further loss and keep your report useful for review, banking escalation, platform reporting, and official complaints.

01

Verify bank changes by phone

Do this early: verify bank changes by phone helps reduce repeat contact, preserve proof, and keep escalation options open.

02

Freeze transfer quickly

Do this early: freeze transfer quickly helps reduce repeat contact, preserve proof, and keep escalation options open.

03

Review email compromise

Do this early: review email compromise helps reduce repeat contact, preserve proof, and keep escalation options open.

Urgent money loss

If money was recently transferred, call 1930 first and raise a bank or payment-app dispute. Speed matters for fund-freeze attempts.

Privacy boundary

Do not upload OTPs, passwords, full card numbers, full Aadhaar, private documents, or unrelated intimate media. Use masked, relevant evidence whenever possible.

Related categories

Similar fraud patterns