Invoice Redirection Scam

In this scam, fraudsters posing as a supplier or contractor email that their bank details have changed, so your next invoice payment is diverted to the scammer's account instead of the genuine business.

Quick verdict

Risk level
High risk
Scam type
Mandate fraud / business payment diversion
Main red flag
An email says a supplier's bank details have changed for your next payment.
What to do first
Verify any bank-detail change by calling the supplier on a known, trusted number.

How this scam works

In this scam, fraudsters posing as a supplier or contractor email that their bank details have changed, so your next invoice payment is diverted to the scammer's account instead of the genuine business.

Bank and payment scams weaponise your trust in your bank and your fear of losing money. They fake fraud alerts, blocked payments, or refunds, then steer you into moving money to a "safe account", sharing a one-time code, or approving a transfer, actions a genuine bank will never ask of you.

In short, the giveaway is usually simple: An email says a supplier's bank details have changed for your next payment. Verify any bank-detail change by calling the supplier on a known, trusted number.

Scammers rotate tactics constantly, the same operation may also run the Real Estate Wire Fraud Scam and the CEO Fraud Scam. See the full Bank & Payment Scams guides hub, or test a suspicious message with the scam checker.

How to spot this scam

  • An unexpected request to change a supplier's bank details
  • Email-only contact about the change
  • Slight differences in the sender's address
  • Pressure to pay an outstanding invoice quickly
  • New account details that do not match prior records

What the message looks like

Example pattern, not a real report
Example pattern: 'Please note our bank account has changed. Kindly update your records and send the outstanding invoice payment to the new account below.'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

What gives it away: An email says a supplier's bank details have changed for your next payment.

The scale of it

#1
copycat bank fraud alerts were the most-reported text scam in the US in 2022
£459.7M
lost to authorised push payment (APP) fraud in the UK in 2023
Source: UK Finance

How to protect yourself

  • Verify any bank-detail change by phone using a known number
  • Confirm changes through a second, trusted channel
  • Set a policy that payment changes require verification
  • Be alert to look-alike email domains

Already responded? Do this now

  • If you paid the new account, contact your bank immediately to try to recall it
  • Alert the genuine supplier and confirm their real details
  • Report the fraud to your bank and authorities
  • Review email security, as your or the supplier's account may be compromised

Mistakes to avoid

  • Do not change payment details on an email alone
  • Do not skip verification due to urgency
  • Do not assume a familiar logo means it is genuine

Related scams to know

Common questions

How does invoice redirection work?
Fraudsters, sometimes after compromising an email account, send a 'bank details changed' message so your payment goes to them instead of the real supplier.
How do I verify a change safely?
Call the supplier on a number you already have, not one in the email, and confirm the change through a second trusted channel before paying.
I paid the new account. What now?
Contact your bank immediately to try to recall the payment, alert the genuine supplier, and report the fraud.
Whose email was hacked?
It could be yours or the supplier's. Review email security on both sides, and treat any payment-change request with extra caution.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.