---
id: fake-invoice-payment-route
slug: fake-invoice-payment-route
title: 'Fake Invoice Payment Route: What to check before you send money'
shortTitle: Invoice Payment Change
hook: A normal invoice with one quiet payment change can move money to the wrong place.
category: Payment & Invoice Red Flags
riskLevel: high
visibleScreen: An invoice email showing a new bank account or changed payment details.
redFlag: New payment details appear inside an email, especially with urgency or secrecy.
whyItWorks: The invoice can be real while the payment route is fake or changed by an attacker.
saferMove: Confirm payment changes through a trusted contact method you already had, not the email thread.
ifAlreadyClicked:
  - If you have not paid, pause and confirm the change through a trusted channel.
  - If you already paid, contact your bank immediately and preserve the email trail.
  - If your email account may be involved, change the password and turn on two-factor authentication.
checklist:
  - Did the bank details change?
  - Are you being rushed?
  - Can you confirm through a saved phone number or known contact?
videoUrl: null
thumbnail: /redflags/thumbnails/fake-invoice-payment-route-start.webp
related:
  - delivery-sms-trap
  - fake-support-popup
toolRelevance: Password safety may be relevant if an email account was compromised. Payment confirmation habits matter first.
affiliateCategory: password-safety
seoTitle: 'Changed invoice payment details: red flags before you send money'
metaDescription: 'Learn how fake invoice payment-route changes work and what to check before paying a new bank account from an email.'
socialTitle: 'Invoice Payment Change: Confirm before you pay'
lastUpdated: 2026-06-03
---

A payment-route scam does not always look messy. The email may use a real invoice, a real amount, and a familiar deadline.

The red flag is the new payment route. Confirm it outside the message before sending money.