Verify Changed Bank Details Before Paying an Invoice
Treat unexpected bank-detail changes as unverified until the supplier confirms them using a phone number or contact method you independently obtained—not the number in the suspicious message.
Three steps to take
- Pause payment when an invoice changes the beneficiary name, BSB, account number or other payment instructions unexpectedly.
- Call the supplier using a number from an established, independent source such as a contract or previously verified website.
- If you have already paid suspicious details, call your bank or payment provider immediately and request their fraud response or recall process. Keep the documents and report the incident.
Why this works
Business email compromise can produce convincing invoices from familiar names and genuine-looking email threads. Logos, signatures and a familiar sender name are not proof that payment details are correct.
Waiting to verify is usually less costly than sending money to an account you cannot independently authenticate. Bank recovery after a completed transfer is time-sensitive and not guaranteed.
Recommended tool or official service
Scamwatch business email compromise guidance
Consider a rule in your business: any first payment or change to supplier banking details needs out-of-band confirmation.
Open Scamwatch business email compromise guidance — official websiteFrequently asked questions
Is a reply to the invoice email enough?
No. A compromised mailbox could answer the reply. Use a different verified channel.
Can a supplier legitimately change banks?
Yes. The change itself is not proof of fraud; independent confirmation is the important step.
What if I have already sent the money?
Contact your bank immediately. Provide the transaction details and request its fraud or transfer-recall process.
Should I delete the suspicious email?
Keep relevant evidence until the bank and supplier have investigated, then follow their security guidance.
More popular reads Best smartphones · Free tools · Trading platforms