How to Tell if an Invoice Is Fake: 9 Warning Signs

To tell if an invoice is fake, check three things before you pay: whether the vendor is real and already in your approved list, whether the invoice matches a purchase order and a receipt of goods, and whether the details are internally consistent (math adds up, bank account is unchanged, invoice number is not a duplicate). A fake invoice usually fails at least one of these. The hard cases are the ones that pass the eye test because the fraud is a single altered field, such as a swapped bank account on an otherwise genuine bill.

Fake and fraudulent invoices cost US businesses heavily every year, and AP is the last line of defense. The good news is that verification follows a repeatable checklist. Below are nine warning signs to run through, from the obvious to the subtle, plus how to turn the checklist into an automated control so it happens on every invoice, not just the ones that feel off.

How can you tell if an invoice is fake?

You can tell an invoice is fake by verifying the vendor, the authorization, and the details, and looking for any mismatch. Confirm the supplier exists in your approved vendor list, match the invoice to a purchase order and goods receipt, and check that the amounts, bank account, and invoice number are consistent with what you expect. If the vendor is unknown, there is no matching PO, the bank details changed, or the number repeats a prior bill, treat it as suspect until proven genuine.

9 red flags that an invoice is fake

1. The vendor is not in your approved list. An invoice from a supplier you have no record of onboarding is the single biggest warning sign. Legitimate vendors go through your setup process first.
2. There is no matching purchase order. For PO-based spend, an invoice with no PO, or a PO number that does not exist in your system, should not be paid without investigation.
3. The bank details changed. A new account, especially one requested recently by email, is the hallmark of business email compromise. Verify any change by phone before paying.
4. The invoice number is a duplicate. A repeated invoice number, or a near-identical bill days apart, points to a duplicate-payment attempt, whether accidental or deliberate.
5. The math does not add up. Line items that do not sum to the subtotal, tax that is miscalculated, or a total that differs from the PO are all reasons to hold.
6. Vague or generic line items. Descriptions like "consulting services" or "miscellaneous" with no detail, quantity, or rate are common on fabricated invoices.
7. Pressure to pay fast. Urgent language, threats of late fees, or a request to bypass normal approval is a social-engineering tactic, not a business norm.
8. Mismatched contact details. An email domain, phone number, or address that differs from what you have on file for that vendor.
9. Amounts just under an approval threshold. Bills priced to sit just below the level that would trigger a second approver often signal someone gaming the controls.

How to verify a suspicious invoice, step by step

When an invoice trips one of the flags above, work through this quickly:

1. Confirm the vendor. Check they are a legitimate, registered business in your approved master file. For higher-risk or new suppliers, confirm they are a real registered company with a valid certificate of insurance on file before you release anything.
2. Match to a PO and receipt. Run the three-way match: invoice against purchase order against proof the goods or services arrived. A clean match is strong evidence the invoice is real.
3. Verify bank changes out of band. If the account differs from what you have paid before, call the vendor on a known number, never the one on the new request.
4. Check for duplicates. Search your system for the invoice number, amount, and date to rule out a repeat.
5. Escalate if anything fails. Route unresolved cases to a second approver or finance lead rather than paying to keep a relationship smooth.

Manual checks versus automated invoice verification

The table shows how automation makes each check happen on every invoice instead of only the ones that look wrong.

What happens if you pay a fake invoice?

If you pay a fake invoice, the money usually leaves fast and is hard to recover, because fraudsters move funds out of the receiving account within hours or days. Beyond the direct loss, a paid fake creates a reconciliation headache, a potential tax and audit issue if it was booked to the wrong account, and a control finding your auditors will flag. If you catch it quickly, contact your bank immediately to attempt a recall and report the incident to the FBI at ic3.gov. The longer-term cost is trust: one successful fake often signals that your controls are soft, and attackers tend to come back. That is why prevention, not recovery, is where AP should spend its energy.

Fake invoices versus honest mistakes

Not every problem invoice is fraud. A duplicate can be an honest resend, a wrong bank account can be a genuine vendor change, and a math error can be a supplier's typo. The verification steps are the same either way, which is the point: a good process treats every anomaly as suspect until confirmed, then resolves it without accusing anyone. Automating the checks removes the awkward judgment call, because the system flags the exception neutrally and AP simply verifies it. That keeps vendor relationships intact while still catching the small fraction of anomalies that are actually malicious.

Why fakes slip through manual AP

Manual AP misses fakes for a simple reason: volume. When a team keys hundreds of invoices a month by hand, the checklist gets shortened under deadline pressure, and the subtle frauds (a single altered bank field, a near-duplicate a week later) are exactly the ones a tired reviewer waves through. Fraudsters count on that. The fix is not to ask people to try harder, but to make the checks automatic so every invoice is validated the same way regardless of workload.

Automate the checklist so nothing slips

The most reliable way to catch fake invoices is to move the checklist into software that runs it on every bill. AI capture reads the invoice, matches it against your approved vendors and purchase orders, flags duplicates by number and amount, and holds any invoice where the bank details have changed. Your team then reviews only the exceptions, which is where human judgment actually adds value. To go deeper, see how invoice fraud detection software scores each invoice for risk, how duplicate invoice detection software stops repeat payments, and how invoice matching software automates the three-way match. For real-world schemes to watch for, read our invoice fraud examples.