Medium riskEmail

Fake Invoice Email Scam

This scam emails an invoice or receipt for something you did not buy, hoping you call a fake 'support' number or click a link to dispute it.

Quick verdict

Risk level
Medium risk
Scam type
Billing phishing scam
Main red flag
An invoice or receipt for a purchase you never made, with a number to call to cancel.
What to do first
Do not call the number or click links. Check the real account directly.

How this scam works

This scam emails an invoice or receipt for something you did not buy, hoping you call a fake 'support' number or click a link to dispute it.

Email scams, or phishing, remain one of the most common ways criminals steal logins, payment details, and money. A convincing message imitates a brand or contact and steers you toward a fake login page, a malicious attachment, or a fraudulent payment.

In short, the giveaway is usually simple: An invoice or receipt for a purchase you never made, with a number to call to cancel. Do not call the number or click links. Check the real account directly.

Scammers rotate tactics constantly, the same operation may also run the Fake Subscription Renewal Email and the Fake Refund Email Scam. See the full Email Scams guides hub, or test a suspicious message with the scam checker.

How to spot this scam

  • An invoice for a product or subscription you never ordered
  • A phone number urging you to call to dispute or cancel
  • An attachment claiming to be the full invoice
  • Sender details that do not match the named company
  • Pressure to act quickly to avoid being charged

What the message looks like

Example pattern, not a real report
Example pattern: 'Your order #INV-90237 for $499.99 has been confirmed. If you did not authorise this, call our billing department immediately at 1-800-XXX-XXXX.'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

What gives it away: An invoice or receipt for a purchase you never made, with a number to call to cancel.

The scale of it

Most reported
phishing was the most common type of cybercrime complaint reported to the FBI in 2023
Source: FBI Internet Crime Complaint Center
$12.5B
total reported internet-crime losses in the US in 2023
Source: FBI Internet Crime Complaint Center

How to protect yourself

  • Do not call the number in the email
  • Check the real account or card statement directly
  • Report the email as phishing and delete it
  • Block the sender

Already responded? Do this now

  • Do not give remote access if you called and were asked to install software
  • Hang up if a 'support agent' asks for payment or remote control
  • Contact your bank if you shared card details
  • Run a security scan if you downloaded an attachment

Mistakes to avoid

  • Do not call the phone number provided
  • Do not install remote-access software for 'support'
  • Do not open unexpected attachments

Related scams to know

Medium risk Email

Fake Subscription Renewal Email

This scam emails that a subscription is renewing for a large amount, hoping you call a fake support number or click a link to cancel and hand over details.

Created by Scam or Safe Editorial Team
High risk Email

Fake Refund Email Scam

This scam emails that you are owed a refund and asks you to confirm bank or card details, or to accept a refund that is really designed to steal your money.

Created by Scam or Safe Editorial Team
Medium risk Email

Fake Amazon Order Email

This scam emails a fake order confirmation for an expensive item, hoping you click a link or call a number to dispute a charge you never made.

Created by Scam or Safe Editorial Team

Common questions

Why send an invoice for something I did not buy?
The goal is to make you panic and call the number, where a fake agent tries to get remote access, payment, or personal details.
Is it safe to open the attachment to check?
No. Attachments in these emails can carry malware. Verify charges through your real account instead of opening files.
The agent asked to install software to 'refund' me. Is that normal?
No. Requests to install remote-access tools are a scam tactic to control your device and accounts. Refuse and hang up.
How do I confirm a charge is real?
Log in to the real retailer or check your bank statement directly. If there is no matching charge, the invoice is fake.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.