Scam Invoice fraud: 'Our bank details have changed'
Any change to a vendor's bank details must be confirmed by calling a number you already have on file.
Test yourself: how many would you spot?accounts@vendorr-supplies.com
Please note our bank account has changed due to an audit. Kindly release the pending payment of ₹4,80,000 to the new account below today.
SCAM
How it works
- Attackers watch a real email thread or spoof a vendor's domain.
- They send new bank details just before a payment is due.
- Payment goes to the attacker and is hard to recover.
Red flags
- Lookalike domains ('vendorr', 'supp1ies')
- Bank changes with pressure to pay today
- Replies going to a different address
Stay safe
- Call back on the number in your records, never the one in the email
- Use two-person approval for bank changes
- Report suspicious emails to IT at once
Already happened? Act fast
- Call 1930National Cyber Crime Helpline. The sooner you call, the better the chance of stopping the money.
- cybercrime.gov.inFile an online complaint. Keep screenshots and transaction IDs.
- Call your bankUse the number on your card to block cards, UPI or the account.
- Report on ChakshuReport fraud calls, SMS and WhatsApp messages at sancharsaathi.gov.in.
Questions
We paid a fraudulent account. What now?
Contact your bank immediately to try to recall the payment, report on 1930 or cybercrime.gov.in, and inform your security team.