Invoice Fraud: Where Fake Bills Feel Real

What is invoice fraud?

Invoice fraud is a sophisticated subset of payment fraud where criminals craft fake, altered, or duplicated invoices to deceive businesses into paying funds directly into fraudulent accounts. This deceptive tactic often exploits vulnerabilities in accounts payable workflows and targets finance teams responsible for reviewing and processing invoices.

Examples of Real-Time Occurrences:

  1. A multinational company lost over £500,000 after criminals submitted duplicated invoices impersonating suppliers for services that were never rendered.
  2. In the UK finance sector, business email compromise (BEC), a key enabler of invoice fraud, was cited in 85% of reported fraud cases in 2021.

Common invoice fraud schemes

Fake invoice fraud

A completely fabricated invoice is generated by fraudsters claiming payment for services or goods never provided. Businesses lacking stringent payment verification methods may fall prey, especially when fraudsters mimic characteristics of legitimate suppliers.

Vendor impersonation fraud

Fraudsters pose as genuine vendors by obtaining detailed information about the target company. Payments are redirected to fraudulent accounts by making their invoices appear legitimate.

Duplicate invoice fraud

This involves resubmitting invoices already paid by the business, relying on weak accounts payable systems that neglect to cross-check historical payments.

Invoice alteration fraud

Fraudsters modify payment details on genuine invoices, usually bank account information, so the payment is siphoned off to a fraudulent account.

How invoice fraud happens

Invoice fraud schemes generally evolve through four main stages:

  • Gathering company information: Fraudsters exploit publicly available supplier contact details and details obtained through phishing or cyber-attacks.
  • Email compromise: Techniques like email spoofing or business email compromise enable fraudsters to impersonate suppliers effectively.
  • Exploiting system flaws: Weak verification processes, such as manual invoice approval, become the entry point for loophole exploitations.
  • Triggering urgency: Fraudsters create urgency, mirroring real supplier demands to bypass approval safeguards.

Red flags and warning signs

Spotting these signs can help organisations identify invoice fraud:

  • Bank detail changes: Sudden requests to update supplier payment details without prior notice.
  • Urgency in requests: Insistence on rapid payment transfers that sidestep normal approval processes.
  • Formatting inconsistencies: Errors or lack of details in invoice headers that deviate from known standards.
  • Unexpected invoices: Duplicate invoices or payment requests for unknown goods/services.
  • Shift in payment methods: Requesting payments outside established norms, including unconventional platforms or accounts.

How to detect invoice fraud

Invoice matching process

Cross-reference incoming invoices against purchase orders and payment receipts to identify anomalies.

Duplicate payment monitoring

Fraud detection tools help identify duplicate invoice submissions—an area where automation excels.

Supplier validation checks

Verification of supplier identities and transaction histories remains crucial. Reliable verification tools like LSEG Risk Intelligence Global Account Verification help validate bank account ownership faster.

Tracking anomalies through workflows

Audit trails in accounts payable systems highlight behavioural anomalies. LSEG Risk Intelligence helps businesses implement robust solutions to streamline anomaly detection effectively.

How to prevent invoice fraud

Enhancing accounts payable systems

Segregate duties among finance teams to minimise fraud risks. Adopt automated invoice checks to streamline fraud detection and provide transparent responses.

Dual approvals

Secure payment workflows via dual-approval mechanisms that ensure oversight in high-value invoice transactions.

Supplier onboarding

Establish detailed supplier verification processes, including legitimacy checks for bank accounts. Leveraging tools like LSEG Risk Intelligence account verification solutions can address these challenges collectively, enhancing fraud prevention strategies across accounts payable systems, dual approvals, and onboarding activities.

Employee training

Educating employees about attempted invoice fraud and business email compromise (BEC) techniques mitigates susceptibility.

Business impact of invoice fraud

Financial losses

Direct losses occur when series of fraudulent invoices are paid, impacting balance sheets. Globally, APP fraud losses are projected to reach $331 billion by 2027.

Reputation damage

Invoice fraud tarnishes relationships with suppliers when payments fail to be processed correctly. SMEs report frequent operational disruptions due to supplier impersonation.

Invoice fraud and other fraud types

Linked to Business Email Compromise (BEC)

Most invoice fraud schemes originate from BEC instances. Fraudsters manipulate emails to divert customary payment activities.

Evolves into payment redirection fraud

Alterations in bank details often lead to irreversible payment redirection fraud, placing companies at severe monetary liability.

Overlapping Accounts Payable Fraud Schemes

Common symptoms like duplicate payments and modified payment instructions manifest as broader AP fraud categories.

Application of Risk Intelligence in Invoice Fraud Mitigation

Here’s a refined version with broader, neutral subheadings to remove references like "Internal LSEG":

Use Cases in Fraud Prevention Strategies

  • Supplier Identity Verification: Streamlining processes to verify supplier identities is crucial for minimising payment risks. Solutions like LSEG Risk Intelligence’s advanced global account verification tools can aid organisations in enhancing supply chain integrity.
  • Screening High-Risk Entities: To mitigate exposure to invoice fraud, businesses can utilise systems such as LSEG World-Check One, which offers advanced risk screening capabilities. This solution enables organisations to identify high-risk entities and assess their connections to potentially fraudulent activities. With features like enhanced name-matching algorithms and structured media screening, World-Check One simplifies due diligence and supports robust compliance efforts during supplier engagement.
  • Automated Fraud Detection Integration: Advanced APIs, such as those offered by LSEG Risk Intelligence, integrate seamlessly into existing systems to automate fraud detection workflows. These APIs provide real-time verification of bank account information, flag potential risks, and validate account ownership, supporting operational efficiency while maintaining accuracy in payment processes.

By utilising automation and real-time validation strategies, businesses can foster more secure payment ecosystems and mitigate the systemic risks of invoice fraud.

FAQs

  • Invoice fraud involves the manipulation of invoices for financial gain, usually through deceitful practices like falsifying invoice details or diverting payments to unauthorised accounts. Common types include fake supplier invoices or altering legitimate payment details. These schemes aim to exploit loopholes in a company's accounts payable processes.

  • An example is when a fraudster sends a fake invoice using a supplier’s name, requesting payment for goods or services that were never provided. Another instance could involve altering bank account details on a valid invoice to redirect payments.

  • Invoice fraud operates by exploiting gaps in payment processes. Fraudsters may impersonate suppliers, issue fake invoices, or hack into systems to intercept legitimate invoices and change payment instructions.

  • Popular schemes include invoice cloning, fake supplier creation, overcharging, duplicate invoice submission, and payment redirection scams. Business email compromises often facilitate these frauds by intercepting communications.

  • Signs include:

    • Unexpected changes to bank account details.
    • Duplicate or unfamiliar invoices.
    • Urgent payment requests without explanation.
    • Poor formatting or errors suggesting illegitimacy in invoices.
  • Detection involves rigorous verification processes such as matching invoice amounts to purchase orders, ensuring accounts-related email authenticity, and adopting software solutions like account verification tools to automate checks.

  • Preventative measures include:

    • Implementing multi-level approval systems.
    • Conducting regular supplier account validations.
    • Using automated fraud detection tools for verification.

    Regular employee training also aids in recognising suspicious patterns.

  • Duplicate invoice fraud occurs when a fraudster submits multiple identical invoices to be paid, often exploiting disorganisation or lack of scrutiny in payment systems.

  • Vendor fraud specifically targets a supplier relationship. Fraudsters issue counterfeit invoices using the vendor's details or collude with internal staff to generate inflated bills.

  • Business email compromises involve fraudsters hijacking supplier communication to send altered invoices or request unauthorised bank account changes. This manipulation exploits weak authentication systems.

  • Controls include account verification systems, automated approval workflows, segregation of duties, and robust audit processes. Legal validation tools help ensure transaction security.

  • Generally, the entity failing to validate supplier transactions bears the risk. However, liability may be shared if contractual terms or third-party guarantors reduce exposure.

  • Payment redirection fraud occurs when a legitimate invoice is intercepted and payment details are altered to reroute funds to cybercriminals, often without the company realising until reconciliation.

  • Leading tools include account verification technologies like LSEG’s Risk Intelligence systems, which help validate supplier details, ownership, and provide fraud risk signals in real time.

  • Immediate actions include freezing suspected transactions, conducting an internal review, notifying affected parties, and engaging forensic experts. Strengthening internal fraud control systems is also vital to prevent recurrence.

Request details

Help & Support

Already a customer?

Office locations

Contact LSEG near you