Fake invoice risk

Fake invoice scam risk review for businesses and finance teams

A practical review of the public signals, email-domain setup and staff process gaps that can make fake invoices, supplier impersonation and payment redirection scams more effective.

What we review

Fake invoice scams often combine social pressure with weak domain trust. ScanLens reviews whether your public setup gives attackers an easier path to impersonate your business or suppliers.

  • Email authentication gaps
  • Lookalike domain observations
  • Suspicious invoice links
  • Website trust and contact signals
  • Payment redirection warning signs
  • Staff escalation workflow

Recommended business controls

  1. Require a second channel check before changing supplier bank details.
  2. Keep known supplier contact details separate from email threads.
  3. Use SPF, DKIM and DMARC to reduce domain spoofing risk.
  4. Train staff to report urgent payment requests without blame.
  5. Keep evidence when a suspicious invoice or link is received.

Business Protection Setup

Best for staff workflow
£399

Adds a written suspicious invoice, link and email reporting workflow for the team.

FAQ

Do you investigate bank fraud?

No. This is a prevention and risk review, not a fraud investigation or legal service.

Can I send a suspicious invoice?

Yes, you can describe the message and provide the suspicious link or public details you want reviewed.

Do you need account access?

No. The standard review uses public signals and information you choose to provide.

What is the output?

A written report with findings, business impact and recommended next steps.