What's the Best Choice?
Home / Guides / Answer
PRACTICAL GUIDE · OUR RECOMMENDATION

Scammer sends fake invoices using your business name

The answer

Warn customers through your verified channels, preserve examples of the fake invoices and report impersonating domains or email accounts.

What to do next

  1. Warn customers through your verified channels, preserve examples of the fake invoices and report impersonating domains or email accounts.
  2. Ask affected payers to contact their bank immediately and provide the genuine payment details.
  3. Strengthen your email-domain authentication and publish a simple procedure for verifying invoice changes by phone.

Recommended service or product

Australian Cyber Security Centre

Australian Cyber Security Centre is a relevant starting point for this task because it offers the official service, tool or product category used in the steps above.

Open Australian Cyber Security Centre — official website

What to check before deciding

Ask affected payers to contact their bank immediately and provide the genuine payment details. Strengthen your email-domain authentication and publish a simple procedure for verifying invoice changes by phone.

Explore finance: Upcoming IPOs · Trading platforms

Frequently asked questions

Which checks matter most for scammer sends fake invoices using your business name?

Warn customers through your verified channels, preserve examples of the fake invoices and report impersonating domains or email accounts.

What should I do next if the issue with scammer sends fake invoices using your business name remains?

Ask affected payers to contact their bank immediately and provide the genuine payment details.

What should I do next if the issue with scammer sends fake invoices using your business name remains (part 3)?

Strengthen your email-domain authentication and publish a simple procedure for verifying invoice changes by phone.

What should readers understand about scammer sends fake invoices using your business name?

Distinguish display-name spoofing from true account breach; notify clients and report fraudulent domains/account activity.