What should I do if I think I’ve paid a fraudulent invoice?

Contact your bank immediately using a trusted number and explain that the payment may be fraudulent. Ask about stopping or recovering it. Preserve the evidence and report the incident through the appropriate official route. Recovery is not guaranteed, so speed matters.

These answers provide general information, not advice tailored to your circumstances. Rules can change and exceptions may apply — speak to the CASS team before making a tax, accounting or financial decision.

Call the bank immediately

Give the payment date, amount, recipient details and transaction reference. If more payments are scheduled, ask the bank what can be stopped and follow its instructions.

Check with the real supplier

Use contact details you already trust, not those in the suspicious message. Establish whether their account or yours may have been compromised and prevent further payments to the suspect details.

Keep the evidence

Retain emails, invoices, bank records and a timeline. Report the fraud through the official route for your location, and check any insurer’s notification requirements promptly.

Review the records and access

Notify CASS through your usual trusted channel. We can help identify affected transactions. IT support may need to secure compromised accounts, and personal-data reporting may require assessment.