Small Business & Workplace Scams

Small business and workplace scams target organisations and their staff. They include fake invoices and supplier mandate changes, CEO and business email compromise, bogus directory or trademark listings, domain and SEO cons, payroll diversion, and fake utility or equipment bills. They rely on busy teams, authority, and routine payment processes to slip through, often costing far more than consumer scams.

Common red flags

  • An unexpected change to a supplier's bank details
  • Urgent payment or gift card requests from a 'boss'
  • Invoices or bills for services you did not order
  • Pressure that bypasses normal approval processes
  • Look-alike sender addresses and domains

Business scam guides

Medium risk Business

Directory Listing Scam

In this scam, businesses receive official-looking invoices or 'renewal' notices for online or print directory listings they never ordered, hoping a busy team pays without checking.

Medium risk Business

Office Supplies & Toner Scam

In this scam, 'toner pirates' or supply firms ship unordered printer toner or office supplies, then invoice the business at inflated prices, often after a call 'confirming' details to seem legitimate.

Medium risk Business

Trademark Registration Scam

In this scam, businesses receive official-looking notices to register, renew, or 'protect' a trademark, charging high fees for unnecessary services or registrations that are not official.

Medium risk Business

SEO Services Scam

In this scam, cold callers or emails offer guaranteed top Google rankings, claim to be 'from Google', or threaten that your listing will be removed, charging for SEO services that are useless or harmful.

Medium risk Business

Merchant Services Scam

In this scam, a merchant services or card-reader provider promises big savings, then locks businesses into long contracts and leases with hidden fees, early-termination penalties, and equipment that is overpriced or unnecessary.

High risk Business

Payroll Diversion Scam

In this scam, fraudsters pose as an employee emailing HR or payroll to change their bank details, diverting the next salary payment to an account they control before the real worker notices.

Medium risk Business

Recruitment Agency Fee Scam

In this scam, a fake or dishonest recruitment agency promises jobs or placements, then charges jobseekers upfront fees for registration, training, checks, or equipment, for roles that do not exist.

Medium risk Business

Fake Business Grant Scam

In this scam, fraudsters offer fake government or foundation business grants, charging application or release fees and harvesting company and bank details for funding that does not exist.

Medium risk Business

Fake VAT & Tax Registration Scam

In this scam, third-party sites and callers pose as official tax bodies or agents, charging businesses inflated fees to register for VAT or tax, harvesting company details for a process that is free or low-cost officially.

Medium risk Business

Fake Data Protection Fee Scam

In this scam, official-looking letters, emails, or calls demand that a business pay a data protection or GDPR 'registration' fee, threatening fines, while impersonating the regulator to collect inflated or bogus payments.

High risk Business

Fake Purchase Order Scam

In this scam, fraudsters impersonate a university, large company, or government body, sending a convincing purchase order to obtain goods on credit, then redirect or collect the goods and never pay.

Frequently asked questions

How do we prevent invoice and mandate fraud?
Verify any change to a supplier's bank details by phone using a known number, require dual approval for payments, and be alert to look-alike email addresses.
Why are gift card requests from a 'boss' a red flag?
Gift card codes are fast and hard to trace, so scammers favour them in CEO fraud. Verify any unusual request in person or on a known number before acting.
Are directory and domain bills genuine?
Many unsolicited directory, domain, or trademark 'renewal' notices are bogus. Check against your real records and verify the provider before paying.

Related scam categories

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.