Fraudulent Invoices: What They Are and How to Stop Them

What Is an Invoice Fraud?

Invoice fraud occurs when a fraudster creates or alters a billing document with the intention of stealing money from a business or organization. The fraudulent invoice is usually sent to a finance department that processes payments without verifying the legitimacy of the request. The result is an unauthorized transfer of funds, often discovered only after the payment has been made.

Common Types of Fraudulent Invoices

• Supplier Impersonation: A scammer pretends to be a known supplier and sends an invoice with a new bank account.
• Duplicate Invoicing: The same invoice is submitted multiple times, hoping that at least one will slip through.
• Fake Vendor Invoices: A completely fictitious company is created, and invoices are sent for goods or services that never existed.
• Invoice Swapping: Legitimate invoices are swapped with altered ones that contain higher amounts or different payees.
• Business Email Compromise (BEC): Hackers compromise email accounts of executives or procurement staff and send payment instructions from the compromised address.

Below is a quick comparison of these schemes:

Red Flags to Spot a Fraudulent Invoice

Being vigilant is the first line of defense. Look out for these warning signs:

• Unexpected invoices from new or unknown vendors.
• Changes to bank account details without formal written confirmation.
• Invoices that differ from purchase orders or contracts (quantity, price, description).
• Urgent payment requests or pressure to bypass normal approval steps.
• Spelling or grammatical errors, unprofessional formatting, or inconsistent branding.
• Emails coming from personal Gmail, Yahoo, or other freemail domains rather than the companys official domain.

How to Prevent Invoice Fraud

Implementing strong controls reduces the chance of a successful fraud. Key measures include:

1. Segregation of Duties: Separate the responsibilities of ordering, receiving, and approving payments.
2. Vendor Verification Process: Require written confirmation (e.g., signed letter) before any change to payment information.
3. ThreeWay Matching: Match the invoice, purchase order, and receiving report before authorizing payment.
4. Secure Email Practices: Use digital signatures or encrypted email for any payment instructions.
5. Regular Audits: Conduct random checks of settled invoices and reconcile them against contracts.
6. Training & Awareness: Provide ongoing education for staff on the latest scam tactics.
7. Technology Solutions: Deploy invoiceprocessing software that flags anomalies such as duplicate numbers or sudden vendor changes.

If You Suspect an Invoice Fraud

Quick action can limit losses. Follow these steps:

• Pause the Payment: Immediately stop processing the suspicious invoice.
• Notify Management: Alert the finance head and the relevant department head.
• Contact the Vendor: Verify the invoice directly using known contact details.
• Investigate: Review email headers, server logs, and any altered documents.
• Report: If money was transferred, file a report with your bank and local law enforcement.
• Document Lessons Learned: Update policies and training based on the incident.

Remember, most successful scams exploit a breakdown in standard procedures. Reinforcing those procedures is the most effective cure.

Key Takeaways

Invoice fraud is a pervasive threat that preys on weak internal controls and human error. By understanding the common types, staying alert to red flags, and establishing robust verification and segregation processes, organizations can dramatically reduce their exposure. Regular training, technology aids, and a culture of verification are essential to keeping your payments safe.