NAB is aware of invoice scam attempts targeting Australian businesses.
An invoice scam is when a business receives an emailed invoice from a supplier whose email account has been compromised by a criminal. The criminal will alter the invoice’s payment details to a fraudulent or mule account. As the invoice looks legitimate, the business doesn’t question the payment details, and sends the payment to the fraudulent account.
Another variation of an invoice scam is when a business receives a request advising a supplier’s payment details have changed, and to make payments to a new account.
Before processing invoices, check the payment details against the last invoice. If they have changed, or you receive a request to update payment details:
- Do not proceed with the transaction(s), and
- Call the supplier/sender to confirm the legitimacy of the request, using a known contact or publicly listed number. Do not call the number on the new invoice.
If you have received an email of this type and actioned the request, please contact NAB on 13 22 65 and ask for the Anti-Scam Investigations Team.
Whilst the bank will make every effort to recall funds, recovery is not guaranteed.
Speak to your banker about adding extra security to your account by using a security token, dual authorisation and segregation of duties: ‘Security for NAB Connect Customers’.
To learn more about protecting your business from invoice scams, read this article and visit nab.com.au/security.
