Payment & Invoice Red Flags

Fake Invoice Payment Route: What to check before you send money

A normal invoice with one quiet payment change can move money to the wrong place.

Risk: high YouTube Short companion Updated 03/06/2026

A payment-route scam does not always look messy. The email may use a real invoice, a real amount, and a familiar deadline.

The red flag is the new payment route. Confirm it outside the message before sending money.

Do this first

Next 5 minutes

  1. Confirm payment changes through a trusted contact method you already had, not the email thread.
  2. If you have not paid, pause and confirm the change through a trusted channel.
  3. If you already paid, contact your bank immediately and preserve the email trail.
  4. If your email account may be involved, change the password and turn on two-factor authentication.

Then continue with the red flag and checklist below. If you already entered details or paid, open already-clicked help.

The red flag

New payment details appear inside an email, especially with urgency or secrecy.

Why it works

The invoice can be real while the payment route is fake or changed by an attacker.

Safer move

Confirm payment changes through a trusted contact method you already had, not the email thread.

If you already clicked

  • If you have not paid, pause and confirm the change through a trusted channel.
  • If you already paid, contact your bank immediately and preserve the email trail.
  • If your email account may be involved, change the password and turn on two-factor authentication.

Quick questions

FAQ

What should I do if I clicked this invoice payment change?

If you have not paid, pause and confirm the change through a trusted channel. If you already paid, contact your bank immediately and preserve the email trail. If your email account may be involved, change the password and turn on two-factor authentication.

What should I check before acting?

Did the bank details change? Are you being rushed? Can you confirm through a saved phone number or known contact?

What is the safer move?

Confirm payment changes through a trusted contact method you already had, not the email thread.

General safety note

This is general safety information, not legal or financial advice. If money, accounts, or identity documents are involved, contact your bank, account provider, or local authorities.