Fake Revolut Invoice Redirection Scam
Scammers intercept or forge business payment instructions and ask recipients to redirect invoice payments to a new Revolut account number, claiming a banking change.
Part of: Invoice Redirection Fraud
Last reviewed: 8 June 2026
Revolut is increasingly used as a primary business banking account by startups, freelancers, and SMEs in Europe and beyond. Its instant IBAN and account numbers look identical to traditional bank account credentials, which makes invoice redirection — also known as business email compromise — easier to perpetrate under the Revolut brand.
In this scam, a criminal either gains access to the email communication between two businesses or forges a credible email from one party to the other. The message announces a change of payment details: the supplier has moved to a new Revolut account, and all future invoices should be settled to the provided sort code and IBAN. The new details belong to the scammer.
Because Revolut accounts are opened quickly and internationally, scammers find them convenient receiving vessels — they can move funds and close the account before the fraud is reported.
How this scam works on the Revolut brand
A finance department employee receives an email that appears to come from a known supplier. The email references a real pending invoice by number and amount, then explains that the supplier has recently switched to Revolut for business banking and provides a new UK sort code and account number or European IBAN.
In some cases the fraudster has access to the genuine email thread and replies to an actual prior exchange, making the change-of-details request appear as a natural continuation of the conversation. The sender address may be one character different from the real one — invisible in a busy inbox.
Payment is made to the Revolut account. The supplier, who received no such payment, follows up about the outstanding invoice. By the time the discrepancy is discovered, the Revolut account has been emptied and may have already been closed.
Common red flags
- A supplier emails to say they have changed bank details to a new Revolut account — always verify this by phone.
- The email domain has a subtle difference from the supplier's real domain (extra letter, different TLD).
- The new account details cannot be verified through the supplier's official website or a number from your own records.
- The email thread suddenly changes tone or writing style compared to earlier messages.
- The new account details arrived very close to a payment due date, creating urgency.
- The request asks for quick payment to a personal-name Revolut account rather than a registered company name.
- The Revolut account sort code / IBAN differs from the country where the supplier operates.
How to protect yourself
- Always verify bank-detail changes by calling the supplier on a number from your own records — never the one in the email.
- Implement a dual-authorisation process for any change to supplier payment details.
- Train accounts payable staff to treat any bank-change request as high-risk until verbally confirmed.
- Check that the account name matches the company name before sending payment.
- For large transfers, consider sending a small test payment first and confirming receipt before the full amount.
How to report it
- Contact your bank immediately to recall the transfer if fraud is discovered quickly.
- Report to Action Fraud (UK) at actionfraud.police.uk.
- Report to the FTC at reportfraud.ftc.gov.
- Notify Revolut through revolut.com/help — they can investigate the receiving account.
- File with ic3.gov if international funds were involved.
Frequently asked questions
Why do scammers favour Revolut accounts for invoice redirection?
Revolut accounts can be opened quickly, support multiple currencies, and allow fast international withdrawals. This makes them attractive as temporary receiving accounts before funds are moved on.
Can Revolut freeze a fraudulent receiving account?
Revolut cooperates with fraud investigations and can freeze accounts when credible evidence of fraud is presented. Acting quickly — ideally within hours of discovering the fraud — gives the best chance of fund recovery.
Is there a way to confirm a UK Revolut account belongs to the right business?
In the UK, you can use the Confirmation of Payee service (where available) to check that the account name matches the business name before sending a payment. This service is now mandatory for most UK bank transfers.