invoice scam

This is a scam in which criminals intercept invoices sent as attachments to emails and alter the bank details from the real one to a bank account set up by the criminal.  Often the contact number (if there is one) is changed as well. Many businesses discourage phone calls from customers so it is sometimes difficult to find a contact even if you are suspicious or just cautious and want to check the bank details. This kind of scam is on the rise. It is apparently ridiculously easy to intercept emailed pdfs and alter them.

 An invoice scam can work in a different way. A business will be contacted ostensibly by a supplier and asked to cancel a payment, update the supplier details, and resend the payment.  Or an employee will be contacted supposedly by a business executive and asked to send money to particular account. The dutiful employee, never doubting that this is an email from the boss, sends off the payment.  Sadly both strategies have been successful.