What it means
Invoice fraud targets the point where a business turns a bill into a payment: a false invoice might claim goods were supplied when they were not, and a genuine supplier's invoice can also be altered so funds go to someone else. Both patterns can exploit rushed accounts-payable staff, so the first question is whether the obligation and recipient are real.
CIBC's fake-invoice warning describes common signs and verification steps, Old National Bank discusses vendor-payment fraud, and ACFE material covers false billing schemes, but these sources show different routes to the same loss and do not authenticate any particular incoming invoice. A familiar logo or email thread is only a clue, so start with the purchase order, contract and evidence of delivery or service.
An invoice for 100 chairs should match an order and receipt, subject to agreed changes, and a professional-services bill may need an approved timesheet or milestone, because paying solely because a document looks formal leaves the business exposed. Vendor identity must be checked, as a fraudster may create a new supplier with a name close to a real one or use a real supplier's address in the description, so review legal name, registration where relevant and known contact details and keep the supplier master file under controlled access.
Bank-detail changes are a high-risk moment, because a message may provide a real invoice number and amount while substituting a new account. Verify the change by calling a previously trusted number or using an established authenticated portal, not by replying to the message, and record the confirmation and independent reviewer.
A genuine mailbox can be compromised, so correct spelling, an authentic signature and a long thread do not prove the account holder wrote the instruction, and since the attacker may watch for a large invoice and intervene at the right time, the payment destination should be verified as a separate fact even when the commercial transaction is real. Inflated invoices are another form: a contractor might bill extra hours or materials not provided, possibly with help from an insider.
Compare quantities and rates with the agreement and work records, remembering that not every difference is fraud, since legitimate variation or error must be considered, and investigate before accusing anyone. Segregation helps, with one person setting up a vendor, another approving work and another releasing payment, while a small business may use owner review of new payees and regular bank reconciliation, with a second approver who inspects bank details and source evidence, not just clicks a button on a familiar-looking invoice.
A duplicate invoice can cause a payment error without dishonest intent, for example when a supplier resends a reminder and both copies enter the system, so check invoice number, date, amount and underlying obligation, because fraud and error require different responses even if both cause cash leakage. An urgent request can be legitimate, but urgency should not override verification, and the company should tell the requester that it follows a standard independent check for all account changes.
A real supplier should be able to confirm through the established route, and a refusal to allow any check is a reason to pause, not proof of who sent the message. If a suspicious payment was made, contact the bank immediately through a trusted channel and ask about recall or freezing options, preserve the invoice, email headers, vendor record, approvals and transaction reference, and report to relevant authorities where appropriate, since recovery is uncertain and speed can matter.
For a simple exposure measure, add confirmed fraudulent payments for a defined period, avoiding double-counted reversals: if $20,000 was sent and $5,000 actually recovered, the unrecovered cash loss is $15,000 before other costs, and a pending promise to repay is not recovered cash. Invoice fraud is prevented by confirming both the goods or service and the payment destination, so match documents, control vendor changes, independently verify unusual instructions, and when a flag appears, preserve evidence and investigate calmly, because neither a polished invoice nor a suspicious typo alone settles the case.
In practice
Real-world examples.
Example
A fake invoice for "consulting services" arrives with no order. Accounts payable finds no purchase order, contract or approver for the work. The bill is rejected and reported to the security team.
Example
An email asks to pay a supplier's invoice to a new account. The team phones the supplier on a number already held in the vendor master file. The supplier denies sending the change, so the payment is stopped.
Example
A matched delivery note reveals a false invoice. The invoice claims 100 chairs, but the receiving record shows 60 delivered. The buyer queries the difference with the supplier before paying anything.
Formula
Calculation
Prevented loss = value of fraudulent invoices stopped before payment
Unrecovered loss = fraudulent amount paid - amount actually recovered
Worked example (fictional figures). Three false invoices worth $40,000 each are stopped, so prevented loss = 3 x $40,000 = $120,000.
Separately, $20,000 was paid on a fraudulent invoice and $5,000 was recovered through the bank, so the unrecovered loss is $20,000 - $5,000 = $15,000. If total supplier payments in the period were $2,000,000, the unrecovered loss is $15,000 / $2,000,000 x 100 = 0.75% of payments. Keep gross and net figures separate, and do not count a promise to repay as recovered cash.Case study
Seen in the real world.
This illustrative and entirely fictional case follows Harbor Fabrication, an invented manufacturer receiving an urgent invoice from a familiar vendor with new bank details. Accounts payable matches the work but calls the vendor using a number already in its system. The vendor denies the change, so payment is paused and the account reviewed. The company then requires a second person to review every bank-detail change, with the confirmation call logged in the supplier file.
It also reminds staff that urgent wording is a reason for more care, not less. The case does not prove which mailbox or person was compromised. Its point is that the invoice matched real work, yet the payment destination still needed independent verification.
Watch out
Common mistakes.
- Checking the invoice amount while ignoring a changed beneficiary account.
- Calling a phone number printed on the questionable invoice to "verify" its own request.
- Assuming every unfamiliar bill is fraud without checking legitimate work and records.
Questions
People also ask.
What is invoice fraud?
Being tricked into paying false or altered invoices.
What are warning signs?
New bank details, urgency and no matching order.
How is it prevented?
Matching and verifying supplier changes by phone.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%