Invoice fraud · checked 25 October 2026

How to report invoice fraud

If you've paid a fake invoice, or a supplier's "new bank details" turned out to be a scam, report it in this order. The bank comes first because only the bank can try to stop the money.

1. Your bank, straight away

Call the fraud line, not the branch. Ask them to recall the payment and contact the receiving bank to freeze it. Hours matter. The first 24 hours after paying a fake invoice.

2. The national reporting service

• US: the FBI's Internet Crime Complaint Center at ic3.gov. Its Recovery Asset Team works with banks on recent business email compromise cases, so report fast.
• UK: Report Fraud at reportfraud.police.uk or 0300 123 2040, run by the City of London Police. It replaced Action Fraud in December 2025. In Scotland, call Police Scotland on 101.
• India: call 1930 or report at cybercrime.gov.in.

3. What to include

• The amount, date, and the account the money went to (name, number, bank).
• The fake invoice and the emails, with full headers if you can export them.
• Your bank's reference number for the recall.

4. Tell the people involved

• The real supplier: their mailbox may be hacked, and other customers may be next.
• Your insurer: social engineering or crime cover often has a short notice period. What insurers ask for.
• Your own team: check whether your mailbox was the one compromised.

Then close the gap

Most of these losses come from one missing step: a bank-detail change accepted by email alone. How to prevent invoice fraud · verify supplier accounts.

Sources: techUK, "Report Fraud service replaces Action Fraud" (launched 4 December 2025; reportfraud.police.uk; 0300 123 2040; City of London Police); FBI IC3. Read 25 October 2026.

Check a suspicious email free Set up call-backs and approvals