The FTC has been saying this for a while, and owners still need to hear it: scammers love fake invoices.
In its consumer advice for small businesses, the agency says bad actors send invoices for products or services a company never ordered, then hope someone in accounting or operations pays before the bill gets checked. FTC guidance
That sounds obvious until you remember how small businesses actually work.
Invoices come in fast. Approvals get forwarded. Someone is out sick. Someone else assumes the vendor is real. The whole scam depends on speed and routine. It does not need a brilliant criminal. It just needs a busy inbox.
The practical risk is not only the money you lose on the fake bill itself. It is the door that scammer can open if the payment request is tied to phishing, account takeover, or a fake vendor update.
The FTC's advice is simple, and it is worth treating like policy:
- train staff to slow down on unexpected invoices
- verify new payment instructions through a known phone number or portal
- keep a clean vendor list
- make sure one person is not approving and paying everything
- watch for urgency language that tries to skip normal checks
If your business handles regular vendor payments, this is a good morning to ask one question: would your team catch a fake invoice if it looked nearly right?
If the answer is no, the fix is not a new tool first. It is a better review step.
That is boring. It is also cheaper than getting fooled.
Owner takeaway
Add one verification rule for all unexpected invoices today. Do not pay a new bill, changed bank account, or rushed "past due" notice until someone confirms it through a known channel.