Invoice / Vendor Payment Fraud Checker
A supplier ‘changed bank accounts’ by e-mail? Eight questions that expose business-e-mail-compromise before your accounts team pays the wrong account.
Invoice / vendor payment-fraud checker
1. Did the vendor's bank account details change (new account / new bank) in this invoice or e-mail?
2. Was the change communicated only by e-mail or WhatsApp, with no call from a person you know?
3. Does the sender's e-mail domain differ from the vendor's usual domain, even by one letter (e.g. .co vs .com, extra letter)?
4. Does the message press for urgent / same-day payment or threaten to stop supply?
5. Is the invoice amount or the GST / bank details different from the purchase order or previous invoices?
6. Did the request ask you to reply to a different e-mail address or contact a new ‘accounts person’?
7. Have you NOT yet verified the change by calling the vendor on a number you already had?
8. Does the GSTIN on the invoice fail to match the vendor's registered GSTIN on the GST portal?
Questions people ask
What is the one rule that stops this fraud?
Confirm every bank-detail change by calling the vendor on a number you already had — never a number in the e-mail — before paying a rupee.
Been hit and need a human?
Our team helps you draft, file and follow up with the bank and the cyber cell — leave your number for a free callback.
More on the Cyber Desk
- 🔗 Phishing link checkerPaste any link from an SMS, WhatsApp or e-mail. We check the domain against the tricks phishing sites use — lookalike brands, punycode, IP addresses, shorteners, throwaway extensions — instantly and without opening it.
- 💬 Message checkerPaste a suspicious SMS, WhatsApp or e-mail. The checker scores it against the scripts behind Indian frauds — OTP, KYC, prize, job, parcel, electricity and more — and tells you what to do.
- 📲 UPI fraud checkerCollect requests, ‘scan to receive’, PIN for a refund, screen-sharing apps, ‘sent by mistake’ — paste the message or describe the call and see which UPI trick it is.
- 🧑💻 Fake job detectorRegistration fees, ‘like YouTube videos’ tasks, Telegram-only HR, guaranteed selection — paste the offer and see the job-scam signals.
- 🪪 KYC scam checker‘Your KYC will expire today’, ‘SIM blocked in 24 hours’, ‘update PAN via this link’ — check the message against the KYC-scam script.
- 🔐 OTP request analyzerSomeone wants your OTP ‘to cancel a transaction’, ‘for delivery’ or ‘as the bank executive’. Paste what they said and see why it is a scam — and what to do if you already shared one.
The Cyber Desk provides educational tools, checklists and self-help drafts — not legal advice. For serious or high-value fraud, also consult the police and a qualified lawyer.