We paid a fraudulent invoice. What should we do now?

Call your bank immediately, by phone, and ask for a recall of the transfer; ask them to contact the receiving bank so it can freeze the funds. Speed decides the outcome: money that has not yet been moved on can sometimes be stopped in the first hours or days, much less often after that. Then report the fraud to the police, keep every e-mail with its full headers, and inform your cyber insurer if you have one, since many policies cover this kind of fraud only under specific conditions and deadlines. Find out how the fraudster knew the details: a lookalike domain, your own mailbox, or the supplier's mailbox? If one of your accounts was used, treat it as an incident: reset it, revoke its sessions, check its inbox rules and who else was contacted. Finally, tell the real supplier, because they may be the compromised party, and tighten the call-back rule for bank detail changes.

← All 29 questions on Phishing and e-mail aftermathAll topics