Before paying: is this invoice a scam?
Payment scams are simple: they push you to pay quickly (invoice, reminder, “final notice”) to the wrong recipient or a fake payment link. Here: a clear checklist + a 30-second method before bank transfer or card payment.
What you risk in 10 seconds:
- Lost transfer (hard or impossible to recover)
- Information leak (contact details, access, identity)
- Domino effect (future payments diverted if a “new IBAN” is accepted)
Important: an invoice PDF is not proof. The only useful fact is: paying the right recipient, through an official channel.
The most frequent signs of a payment scam
Fraudsters copy your habits: invoices “as usual”, reminders, support messages. Their advantage is speed.
- Urgency + threat + “final reminder” : “Immediate payment”, “penalties”, “account blocked”: the goal is to make you pay before you think.
- Payment details that change (IBAN/recipient) : Classic fraud: the same PDF as before, but the IBAN or recipient is different. Compare it with a known official source.
- Payment link that is not the official website link : A link received by email/DM can lead to a clone. Even if the invoice looks real, the payment may go elsewhere.
- Invoice too vague or inconsistent : Rounded amount, vague label, references that do not match, odd VAT, incomplete details: frequent warning signs.
- New supplier / new address / sudden new contact : Fraudsters impersonate a supplier and impose a “new IBAN”. Never validate a change through the same channel.
- Weak proofs: stamp, signature, logo, “professional” PDF : All of that can be copied. What matters is payment to the right recipient, verified through an official channel.
Simple rule: any payment change (bank details/IBAN, recipient, link, QR code) = red alert → mandatory verification.
The cautious 30-second reflex
Goal: break the urgency and verify the critical point: the recipient (or the domain).
- Do not pay from the message: stop the urgency.
- Check the recipient and IBAN (or the link domain) through a known official source.
- If it is a supplier: call a number you already know / use the official portal (not the email you received).
- If in doubt: ask for verifiable proof or refuse to pay.
Example: an invoice asks you to pay through a link. Even if the PDF is credible, the link can lead to a clone. Check the website before entering a card.
Useful shortcut
If someone gives you a deadline “today”, it is often the fraud mechanism. You win by slowing down.
Verify a proof nowCommon scams: payment / invoice
The scenarios barely change: invoice, reminder, “support”, link, then payment.
- Bank-detail fraud (business) : A “supplier” announces a new IBAN, or an invoice looks familiar but the IBAN has been changed.
- Fake subscription invoice : “Automatic” renewal, threat of service cut-off, small amount to make you pay quickly.
- Fake support / fake reminder : “Your account is blocked, pay here”, “customs fees”, “delivery pending”. The link leads to the trap.
- Trapped payment QR code : A QR code on an invoice can point to a fraudulent page. Same logic: verify the domain / recipient.
This often arrives by email: remember to check the email and, if needed, to create an email proof.
What to do if you almost paid (or already paid)?
- If it is a bank transfer: contact your bank immediately to try a recall, and report the fraud (the earlier, the better).
- If it is a card payment: block the card if needed and monitor transactions.
- If you “validated a new IBAN”: block any future payment and reconfirm the details through a known official channel.
- Keep the evidence: email, invoice, link, page screenshot, exchanges.
- Stop: no payment until verified : The cost of a check is almost zero. The cost of an error is maximal (a transfer is hard to recover).
- Check through an official channel : Find the supplier through its official website or your usual customer area. Look for the invoice from that channel, not from the link.
- Treat “changes” as red alerts : New IBAN, new address, new payment link: mandatory verification through another channel (known phone number, portal).
- Keep clean proof if there is a dispute : Keep the email, received invoice, payment URL and exchanges. The timeline matters.
FAQ
- Is an invoice with VAT/company ID/legal mentions necessarily real? No. Those elements can be copied. The key check is: recipient/IBAN/domain.
- Why am I receiving a “reminder” when I am not expecting anything? Because fraudsters send in bulk. They win through volume and speed.
- What is the best reflex? Never pay from the message. Rebuild the payment from an official channel.
- Does Kicklinks “block” the payment? No. Kicklinks helps you check whether there is a verifiable proof publicly consultable.
Useful links
Other checks: fake website · fake document · email
Do not pay under pressure
If you are being rushed, you are the target. First verify the recipient or domain, then pay only afterwards.
