Fake Procurement Scams

Fake procurement scams involve a fraudster impersonating a reputable organisation — a well-known company, a university, a hospital, or a government body — to place a large purchase order with a supplier on credit terms. The goods are shipped to a delivery address controlled by the fraudster; the invoice is never paid; and the supposed buyer organisation is entirely unaware of the order.

This fraud is particularly damaging for suppliers and wholesalers who extend credit as a normal part of their business model. The credibility of the buyer identity is the primary tool the scammer uses: the prestige of a major institution or well-known corporate name creates a willingness to extend generous credit terms, sometimes without the usual verification steps that would apply to a new, unknown customer.

The value of goods targeted tends to be high — specialist equipment, electronics, medical supplies, or branded consumer goods that can be quickly resold. The fraudster often has knowledge of the supplier's product range and typical order patterns, enabling them to make a plausible purchase request.

The fraud begins with the fraudster researching both their impersonation target (a large, credible institution) and their victim (a supplier whose products they want to steal). Using spoofed email addresses that closely resemble the institution's real domain, they contact the supplier's sales or account management team with a large purchase order.

The purchase order itself may be a professionally formatted document bearing the institution's logo, branding, and a purchase order number. Contact details on the order — buyer name, phone number, email — are controlled by the fraudster. The delivery address is described as a new or temporary facility, a regional depot, or a project site, to explain why it differs from the institution's known address.

Pressure is applied to expedite shipment, often framed around an urgent project, a grant-funded purchase deadline, or seasonal demand. Once goods are dispatched and delivered to the fraudster's controlled address, they disappear. When the genuine invoice arrives, the real institution confirms it placed no such order, and the supplier is left with no payment and no goods.

Fake procurement scams exploit two biases inherent in B2B sales: the desire to win prestige accounts, and the assumption that institutional buyers are inherently creditworthy. When a purchase order arrives from what appears to be a well-known university or government department, the natural response is excitement rather than suspicion.

The fraud is also designed to exploit process gaps. Suppliers may apply rigorous checks to new unknown accounts but apply lighter scrutiny when the 'buyer' is a well-known institution they already deal with or aspire to deal with. The fraudster selects impersonation targets carefully to match this psychology.

Shipping pressure is used to compress the time available for verification. Once goods are physically in transit, reversing the transaction is much harder — psychologically and practically.

A wholesale equipment supplier receives a large purchase order appearing to come from a well-known academic institution. The order references a specific research project, uses the institution's branding, and the contact is responsive and professional. The delivery address is described as a new campus annexe. Eager to win the account, the supplier dispatches the goods on 30-day terms. The institution's genuine procurement office is unaware of any such order. The goods are lost, and the invoice is never paid.

On behalf of [institution name], please supply [goods] on 30-day payment terms. Please ship to our [location] facility. PO number [reference] is attached.

Our department requires [goods] urgently for a research project commencing [date]. Please despatch on our standard account terms and invoice to the address below.

We are placing an initial order for [quantity] of [item] for our facilities team. Credit terms as agreed. Please confirm despatch date and ship to [address].

As purchasing manager for [institution], I'd like to open a credit account and place an order for [goods]. I've attached our official PO. Please can you confirm delivery lead time?

This order is grant-funded and must be received by [date] to comply with funding conditions. Please process on 60-day terms and deliver to [address].

We'd like to extend our existing relationship to include [product line]. Please dispatch [quantity] to our new site at [address] and invoice as normal.

Before shipping any order on credit terms to a new or unfamiliar buyer contact — regardless of how prestigious the buyer name appears:

- Verify through official channels: find the genuine procurement or purchasing department contact for the organisation using details from their official website. Call them using that number to confirm the order was placed. - Do not use contact details from the purchase order: all details on the fraudulent document are controlled by the scammer. - Confirm the delivery address: check whether the delivery address matches the organisation's known locations. For any address that differs, request written confirmation from a verified procurement contact at the organisation. - Apply a credit process: treat first-time institutional orders the same as any new account — run a credit check and require a verified purchase order reference that the institution's own system can confirm. - Verify the email domain: check the sender's email address character by character against the institution's real domain. A single transposed letter is a major warning sign. - When in doubt, hold shipment: the cost of a brief delay is far lower than the cost of lost goods.