JianweiAI-assisted funds analysis
Contact the team

Business & invoices

Payment redirection scams

A fake supplier changes bank details near a real payment deadline. The project and invoice are real; the recipient is not.

See response steps Share this in a workshop
A close view of two people shaking hands in an office

If you have one minute

Pause, then verify independently.

Last-minute bank detail changes

Before paying

Verify changes by an independent callback

See verification steps →

If you paid or shared details

Alert the sending bank immediately

See response steps →

Start with these three signs

  • Last-minute bank detail changes
  • New account name differs from the contract
  • Refuses verification through known contacts

How the situation unfolds

  1. Contact

    An existing supplier email thread or reconciliation message.

  2. The lure

    Our old account is under audit; use the new one.

  3. The demand and outcome

    An attacker monitors compromised email and inserts new payment instructions, or continues the thread from a lookalike address.

Verify these things before paying

  1. Verify changes by an independent callback
  2. Check account names against contracts
  3. Separate change review from payment approval

Already engaged or paid?

  1. Alert the sending bank immediately
  2. Confirm instructions with the original contact
  3. Notify security staff and preserve the email chain

Contact your payment provider and local police promptly. The responsible institution must confirm whether a payment can be stopped, disputed or returned.

Keep these records

Contract and original bank details
Change emails and headers
Verification call records
Transfer times and account details

Keep originals and organise working copies. Never give strangers verification codes, banking passwords, private keys or seed phrases.

Original references

  • FBI Internet Crime Complaint Center (IC3)Publisher location：United States · EnglishOpen the original reference ↗https://www.ic3.gov/PSA/2020/PSA200406

This page summarises public prevention guidance to help recognise methods. It is not an enforcement conclusion about a particular incident. Check the source page for its original title. Procedures and reporting routes vary by jurisdiction. Compiled October 2026.

Related situations

Business email compromise

A fake executive, colleague or partner uses a spoofed or compromised mailbox to request urgent payments or confidential data.

Read the warning signs and checks

Fake purchase orders

An impersonated company or school sends a large order with forged paperwork, requesting credit terms and fast delivery.

Read the warning signs and checks

Fake invoices and unordered services

An unfamiliar supplier sends an official-looking bill for advertising, listings, supplies or a subscription you did not order.

Read the warning signs and checks