How to Protect Your Business From Invoice Fraud and Payment Redirection Scams (2026 Guide)

The questionA supplier emails: “our bank details have changed, please pay the new account”. How do I know it is real – and how do I stop fraudsters sending my clients fake bank details in my name?

How to do it with TRANSMONY

You need: TRANSMONY Account – for receiving payments into account details in your own name, with sign-in and payouts confirmed by email code.

1. Sign in only at transmony.com/accountType transmony.com/account yourself, enter your email and the 6-digit code. TRANSMONY never asks for a code by phone or message – anyone who does is not us. You are signed out after 14 minutes without activity.
2. Send your details the safe wayUse Request a payment: a private link, QR code and PDF with your details. Your client does not retype numbers from an email that someone could have changed.
3. Tell your clients once, in writingAdd one line to your invoices: “Our account details never change by email. If you receive such a message, call us before you pay.”
4. Check every payment that arrivesEach payment shows under Payments received with its fee. If a client says they paid and nothing arrived, confirm the details with them by phone before they pay again.
5. Keep payouts to your own accountsUnder Send money bank transfers go only to bank accounts in your own name, added with Add a bank account, and every transfer is confirmed with a code sent to your email. Up to $5,000 a day goes straight away; larger amounts are checked by our team first. Protect that email with two-step sign-in.
6. Use your monthly statementA PDF or spreadsheet statement for any month, also emailed to you every month, makes it quick to match every payment against your invoices.
7. Tell us at once if something looks wrongOpen a support ticket, write to [email protected] or message us on Telegram or WhatsApp – 24 hours a day, 7 days a week. Minutes matter.

How invoice fraud works

1. The criminal studies you – company websites, social media, sometimes a hacked mailbox – to learn who your suppliers are and when you pay them.
2. They send a convincing message from a hacked email account, or from a look-alike address with one letter changed.
3. They ask for one small change: “Our bank has changed – please pay this and future invoices to the new account.”
4. They add pressure: “urgent”, “before the end of the day”, “the director is travelling and cannot be called”.
5. The money disappears. By the time the real supplier asks why they have not been paid, it has often moved on.

It is not rare. In the UK alone, businesses and people lost £41.3 million to invoice and mandate fraud in 2025, out of £1.28 billion lost to fraud in total (UK Finance). In the US, the FBI recorded about $3.05 billion lost to business email compromise in 2025.

The warning signs

Before you pay a supplier: 6 checks

1. Call to confirm any change of bank details on a phone number you already have.
2. Use a two-person rule for new payees and large payments: one person sets up, another approves.
3. Check the payee name where your bank offers a name check, and stop if it does not match.
4. Turn on two-step sign-in for every email and payment account in your business.
5. Agree with suppliers that bank details are never changed by email alone.
6. Slow down when you are rushed. A real supplier will wait one hour while you check.

What to do if it happens

1. Contact your payment provider at once – the sooner they know, the better the chance of stopping the money.
2. Report it to the police or your national fraud reporting service.
3. Secure your email: change passwords and check for forwarding rules you did not set up.
4. Warn the supplier or client – others may be targeted too.

What it costs

The checks in this guide cost nothing. Email sign-in codes, an email code for every transfer, payment requests and monthly statements are part of every TRANSMONY Account. The account itself has a small fee when money arrives and a small monthly fee, shown right after sign-up and before you accept the terms. See Services & fees and How we keep you safe.

Common mistakes

• Calling the number in the email. A fraudster puts their own number there. Use a number you already have on file.
• Sending a tiny “test” payment to new details. It proves nothing about who owns the account, and very small test amounts cannot be credited to TRANSMONY receiving accounts. Confirm by phone instead.
• Sharing a sign-in code with “support”. TRANSMONY never asks for a code by phone or message. Never give a code to anyone.
• Sending your details as an editable file or screenshot. Anyone who gets into an email thread can change a number in it. Send the payment request link or PDF from your portal.
• Waiting until the end of the day. If you think money went to a fraudster, tell your provider and us straight away.

Frequently asked questions