Is an invoice sent to my business email for services I do not recognise a scam?
Very likely. Unsolicited invoices — sometimes called invoice fraud or billing scams — are sent hoping a busy accounts team will pay without checking.
Last reviewed: 1 June 2026
Explanation
Invoice fraud targets businesses large and small by sending invoices for services that were never delivered or ordered, relying on companies with high invoice volumes to process them without adequate checks. The invoice may be for domain renewals, directory listings, advertising, or generic office supplies. A more sophisticated version involves compromising a real supplier's email and sending a legitimate-looking invoice with changed bank details. Before paying any invoice, verify that the service was actually ordered by someone with authority in your organisation and that the bank details match those held on file for the supplier — confirmed by phone, not by email. Implement a purchase order system and dual-authorisation for new suppliers.
Common red flags
- Invoice for a service no one in the business recalls ordering
- Bank details on the invoice differ from those previously used for this supplier
- Invoice arrived unsolicited with no corresponding purchase order
- Service described is vague — 'website maintenance', 'directory listing'
- Urgency and late payment fee threats on a first invoice
What to do now
- Verify all invoices against purchase orders before payment
- Confirm any bank detail changes by phone using a number already on file
- Implement dual authorisation for new payees
- Report invoice fraud to your police and national fraud reporting service
Frequently asked questions
Are unsolicited invoices legally enforceable?
In most jurisdictions an invoice for services not ordered and not delivered is not legally enforceable. You can dispute it without payment, though scammers sometimes issue threatening follow-up letters.