Independent resource — not affiliated with any U.S. government agency. Learn more

How to Report a Fake Invoice Scam: Protect Your Business from Billing Fraud

🔴
Last verified: June 25, 2026All contact numbers, websites, and procedures confirmed current.

Quick answer: Report a fake invoice scam to the FTC at ReportFraud.ftc.gov and the FBI at IC3.gov. If the invoice arrived by mail, also file with the U.S. Postal Inspection Service at uspis.gov/report. Forward phishing invoice emails to the Anti-Phishing Working Group at reportphishing@apwg.org. Contact your bank immediately if you already paid — wire recalls and chargebacks may be possible.

Fake invoice scams target both businesses and individuals. Scammers send realistic-looking invoices for services never ordered — office supplies, directory listings, domain renewals, or software — betting that busy accounts payable departments will pay without checking. The FTC and USPS actively pursue these schemes as mail fraud and deceptive trade practices. Reporting matters and can stop the same company from hitting others.

Types of Fake Invoice Scams

The most common are directory listing scams (invoices for “Yellow Pages”-style listings no one ordered), domain name renewal scams (invoices mimicking your real registrar but from a different company), office supply scams (deliveries of unwanted goods followed by an invoice demanding payment), charity or advertising scams (invoices claiming payment is due for ads placed on your behalf), and Business Email Compromise (BEC) attacks where scammers impersonate a vendor and redirect legitimate payment to a fraudulent account. BEC alone costs businesses over $3 billion annually according to the FBI.

Where to Report a Fake Invoice Scam

📄 Download Free Reporting Checklist

Get our step-by-step checklist as a quick reference guide

Get Your Free Checklist →
SituationAgencyContact
Fake invoice / billing fraudFTCReportFraud.ftc.gov
Wire fraud / BEC attackFBI IC3IC3.gov
Mailed fake invoice (mail fraud)U.S. Postal Inspection Serviceuspis.gov/report
Phishing invoice emailAnti-Phishing Working Groupreportphishing@apwg.org
State consumer fraudState Attorney GeneralSearch “[your state] attorney general consumer complaint”
You already paid — dispute itYour bank or card issuerCall the number on your card or account statement

How to Report a Fake Invoice Scam Step by Step

  1. Do not pay. If you haven’t paid yet, don’t. Verify with the supposed vendor through a phone number you independently look up — not a number on the suspicious invoice — whether any legitimate debt exists.
  2. Save all documentation. Keep the invoice, envelope (if mailed), any accompanying emails, and records of any communication with the sender. These are evidence for investigators.
  3. Report to the FTC. File at ReportFraud.ftc.gov with the company name, invoice details, dollar amount, and contact information on the fake invoice. The FTC has sued and shut down mass fake invoice operations.
  4. File with the FBI’s IC3. For Business Email Compromise, wire fraud, or any online component, file at IC3.gov. If you wired money, IC3 can initiate a Financial Fraud Kill Chain request — funds have been recovered this way within 24–72 hours of reporting.
  5. Report mail fraud to USPIS. If the fake invoice came by mail, this is a federal crime. Report at uspis.gov/report or call 1-877-876-2455. The Postal Inspection Service actively investigates billing fraud schemes.
  6. Forward phishing emails. Send phishing invoice emails to reportphishing@apwg.org and to your email provider’s abuse team. This helps block the sender for others.
  7. Contact your bank immediately if you paid. For wire transfers, call your bank the same day — the faster you report, the better the chance of a wire recall. For checks, request a stop payment. For card payments, file a chargeback citing unauthorized or fraudulent transaction.
  8. Alert your own organization. If you’re a business, notify accounts payable and other departments so they recognize the scheme. Implement a callback verification policy for any payment over a threshold amount.

Business Email Compromise Warning Signs

Urgent payment requests: BEC attackers often create urgency (“pay today to avoid late fees”) to prevent verification calls.

Changed payment details: An email claiming a vendor changed their bank account or wire instructions is a major red flag — always verify by phone using a known number.

Slight email variations: Scammer domains often differ by one character (e.g., vendor-corp.com vs. vendorcorp.com). Check sender addresses carefully.

Federal Penalties for Invoice Fraud

Mail fraud: Up to 20 years federal imprisonment per count (18 U.S.C. § 1341).

Wire fraud: Up to 20 years federal imprisonment per count (18 U.S.C. § 1343); up to 30 years if a financial institution is involved.

FTC civil penalties: Up to $51,744 per violation for deceptive trade practices. The FTC has obtained multi-million dollar judgments against fake directory and billing companies.

Frequently Asked Questions

What is a fake invoice scam?
A scheme where scammers send invoices for services or products never ordered — directory listings, office supplies, domain renewals, advertising — hoping businesses pay without verifying. Also includes Business Email Compromise, where attackers impersonate vendors to redirect real payments.
Where do I report a fake invoice?
Report to the FTC at ReportFraud.ftc.gov, the FBI at IC3.gov for online or wire fraud, and the U.S. Postal Inspection Service at uspis.gov/report if the invoice arrived by mail. Also file with your state attorney general.
Am I legally required to pay an invoice I didn’t authorize?
No. In the U.S., you cannot be billed for goods or services you didn’t order and don’t want. Unsolicited merchandise sent with an invoice can be treated as a gift under federal law (15 U.S.C. § 1). Simply receiving an invoice does not create an obligation to pay.
I already paid a fake invoice — can I get my money back?
Possibly. Call your bank immediately — wire transfers can sometimes be recalled within 24–72 hours. Card payments can be disputed as unauthorized. File with IC3.gov and your bank to trigger the Financial Fraud Kill Chain for wire transfers. Time is critical.
What is Business Email Compromise (BEC)?
A scam where attackers compromise or spoof a business email to impersonate a vendor, supplier, or executive and trick employees into sending payment to a fraudulent bank account. BEC is the costliest form of cybercrime by dollar losses. Always verify payment changes by calling a known number — never trust contact info in the suspicious email.
How can I protect my business from invoice fraud?
Implement a callback verification policy for any new vendor or changed payment instructions. Train accounts payable staff to recognize fake invoices. Use two-person authorization for large payments. Verify vendor bank changes through a known phone number before processing.

For related guides see: How to Report an Online Scam, How to Report False Advertising, How to Report a Fake Charity.

Independent resource — not affiliated with any U.S. government agency. Last reviewed: June 2026.

📖 Part of our Complete Scam Reporting Guide

This guide is a supporting article in our pillar resource covering all scam types, every federal agency, and all 50 state contacts.

How to Report Any Scam: Complete U.S. Guide →
Need the right agency in your state?

Rules and complaint offices vary by state. Use our state lookup to find the correct reporting agency, phone number, and complaint portal.

Find reporting agencies by state →

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top