How To Protect Sole Traders and Small-Business Owners From Scams
Targeted guidance for protecting a self-employed person or small-business owner from the scams most likely to affect them.
Last reviewed: 1 June 2026
Sole traders and small-business owners face a distinct set of scam risks on top of everyday personal fraud. Fake invoice requests, CEO impersonation, bogus directory listings, HMRC phishing, and payment redirect scams all specifically target businesses. If you are helping protect a self-employed family member or friend, understanding these business-specific threats makes your support far more effective.
Scams that specifically target small businesses
Many of these scams would not fool a large business with internal controls — they are specifically sized to exploit the pressure sole traders operate under.
- Fake invoice emails redirecting payment to a scammer's account
- Directory and advertising invoice scams — billing for listings never ordered
- CEO or client impersonation asking for urgent payment
- HMRC phishing about overdue tax or new payment schemes
- Fake domain renewal or website services from unrecognised providers
Building payment verification habits
Most invoice and payment scams are defeated by a single phone call to a known number before making a payment.
- Verify any change in payment details by calling a known number — not one in the email
- Treat any urgent payment request from a client or supplier with extra caution
- Set a rule: no payment over a certain amount without a direct phone confirmation
- Keep a separate, secure note of regular suppliers' actual bank details
Recognising and refusing bogus invoices
Directory and listing invoice scams send official-looking bills for services never agreed or delivered.
- Never pay an invoice without matching it to a purchase order or a signed agreement
- Be alert to invoices arriving from new or slightly misspelled supplier names
- File an objection immediately with the sender and your national consumer authority
Conversation script
“Have you come across any weird invoices or emails recently that didn't quite add up? There's a lot going around targeting self-employed people at the moment.”
“There's one rule that stops most payment scams: never change payment details based only on an email — always call a number you already have to confirm.”
“I can help you set up a simple checklist for payments if you want — it only takes a few minutes and it protects the business.”
Frequently asked questions
My relative paid a fake invoice — can the money be recovered?
Contact their bank immediately on the fraud line. Explain it was an authorised push payment made under fraud. Banks have an obligation to investigate and, in many cases, to reimburse under the Authorised Push Payment (APP) fraud code. Speed matters — the sooner you call, the better the chance of recovery.
How do I help them tell the difference between a real HMRC letter and a fake one?
Real HMRC correspondence arrives by post and directs you to GOV.UK — they do not call demanding immediate payment, send payment links by text, or ask for bank details by email. Any such approach is a scam regardless of how official it looks. When in doubt, log directly into the HMRC portal without using any link provided.