AI-Generated Fake Invoice Scam via Wire Transfer
AI tools generate realistic invoices matching a company's actual formatting and vendor history, then push finance staff to wire payment to a fraudulent account before the fake document is caught.
Part of: AI-Generated Fake Invoice Scam
Last reviewed: 5 July 2026
Wire transfers are the ordinary way businesses settle large invoices, and the vast majority reach the supplier they should. Scammers prize the same qualities finance teams do, speed and finality: once a wire clears, funds move on within hours, leaving almost no window for recall. An AI-generated invoice mimicking a real vendor's formatting, numbering, and writing style arrives from a lookalike domain, requesting payment to 'updated' bank details, timed for month-end volume. The distinction that matters most: a wire cannot be pulled back, so verify before sending, with a callback to the vendor on a number from existing records.
How this scam works on Wire Transfer
Using details scraped from a compromised email account or public records, an AI tool generates an invoice that closely matches a real vendor's logo, formatting, invoice numbering pattern, and even writing style from prior legitimate correspondence. The fake invoice is emailed to an accounts payable team, sometimes from a lookalike domain, requesting payment to 'updated' bank details due to a supposed change in the vendor's banking arrangement.
Because the invoice looks nearly identical to genuine past invoices from the same vendor, and the request to update banking details is framed as routine, staff can approve a wire transfer without a second look, especially near month-end when volume is high. By the time the real vendor follows up about a missing payment, the wired funds have typically already moved through several accounts and are very difficult to recover.
Common red flags
- An invoice requesting payment to a new bank account, especially when framed as a recent change
- Email domain is a close but subtly altered version of the real vendor's domain
- Invoice arrives with unusual urgency around payment timing compared to the vendor's normal cadence
- Formatting is almost identical to prior invoices but with slight inconsistencies in font, logo resolution, or invoice numbering
- Request to communicate only by email and avoid calling the vendor's known contact to confirm
- Wire transfer requested instead of the vendor's normal payment method
How to protect yourself
- Verify any change to vendor banking details by phone using a number from your existing records, never one provided in the new invoice
- Require a second approver for any wire transfer tied to changed payment instructions
- Compare the sender's email domain character by character against the vendor's known domain
- Use invoice verification or accounts-payable fraud detection tools that flag banking detail changes
- Build a standing policy that banking changes always require a live callback confirmation before payment
- Train finance staff specifically on AI-generated invoice fraud, since these documents can be near-indistinguishable from genuine ones visually
How to report it
- Contact your bank immediately to attempt a wire recall if the fraud is caught quickly
- Report the incident to the FBI's IC3 (in the US) or your national cybercrime and fraud reporting center
- Notify the real vendor so they can warn other clients and investigate a possible email compromise on their end
- File a report with your organization's cyber insurance provider if applicable
Frequently asked questions
We already wired the money, is there any way to get it back?
Contact your bank immediately and ask them to attempt a wire recall or hold, and file a report with your national fraud reporting center right away, since speed matters most. Recovery isn't guaranteed once funds have moved through other accounts.
Should we ever pay an invoice with new banking details without a callback?
No, treat any change to previously known payment instructions as requiring a live phone callback to a contact you already had on file, regardless of how routine or urgent the request seems.
Would cyber insurance cover a loss like this?
It may depend on your specific policy. Some cyber or crime and fidelity policies cover this type of fraud and some don't, so check directly with your provider rather than assuming either way.
Why is wire transfer especially risky compared to other payment methods?
Wire transfers settle quickly and are extremely difficult to reverse, so once funds are sent to a fraudulent account there is only a very narrow window to recall them before they're moved on.
How can we tell an AI-generated invoice from a real one?
Visual similarity alone isn't reliable; the safest check is calling the vendor using a previously known phone number to confirm any change in banking details before paying.