News

We here at McGovern Worn know that invoice fraud and payment scams have become one of the most serious financial threats facing Irish businesses. Fraudsters are increasingly targeting SMEs, knowing that smaller teams, busy owners and informal processes can make it easier to slip a fake invoice or altered bank details through unnoticed. A single successful scam can wipe out months of profit, and the money is often impossible to recover. The good news is that a few simple controls can dramatically reduce your risk.

Invoice fraud comes in many forms. A supplier’s email account may be hacked and used to send genuine-looking invoices with new bank details. A fraudster may pose as the business owner and urgently instruct a staff member to make a payment. Fake invoices may arrive for services never ordered, or criminals may register email addresses that differ from a real supplier’s by just one character. Increasingly, scams are also using AI-generated voice messages and highly convincing emails. Here are five practical ways to protect your business.

1. Always Verify Changes to Bank Details

The most common and costly form of invoice fraud involves a request to change a supplier’s bank details. The email may look entirely genuine, may come from the supplier’s real email address and may arrive in the middle of an existing conversation.

Make it a firm rule that any request to change bank details is verified by phone before any payment is made. Crucially, call the supplier using a number you already hold on file, never a number provided in the email or on the invoice requesting the change. Speak to someone you know where possible, and record who confirmed the change and when. This single step stops the majority of invoice redirection scams.

2. Build Strong Approval Processes

Fraud thrives where one person can create, approve and pay an invoice without anyone else being involved. Introduce clear approval steps so that payments are checked by a second person, particularly for new suppliers, changed bank details or amounts above a set threshold.

Only pay invoices that match a purchase order, contract or confirmed delivery. Where your bank offers dual authorisation on business accounts, use it. These controls may feel like extra administration in a small business, but they provide essential protection and also help prevent genuine errors and duplicate payments.

3. Train Your Team to Spot the Warning Signs

Your staff are your first line of defence, so make sure they know what to look for. Common red flags include urgent requests to pay immediately, instructions to keep a payment confidential, a supplier suddenly changing bank details, unusual requests from senior staff, slight changes in email addresses or spelling, and invoices that differ in layout or tone from previous ones.

Create a culture where employees feel comfortable questioning an unusual request, even if it appears to come from the business owner. Fraudsters rely on pressure and authority to rush people into acting, so a team that knows it is always acceptable to pause and verify is far harder to deceive.

4. Strengthen Your Email and IT Security

Many invoice scams begin with a compromised email account. Protect your business by using multi-factor authentication on all email and financial accounts, requiring strong, unique passwords and keeping software and devices up to date. Ask your IT provider to ensure your email system uses proper security settings that make it harder for criminals to impersonate your domain.

It is also worth considering how much information is publicly available about your business. Details of who handles payments, who your suppliers are and when senior staff are travelling can all be used by fraudsters to make their approach more convincing. Encourage staff to be careful about what they share online.

5. Use Your Bank’s Protections and Check Your Accounts Regularly

Banks now offer tools that can help stop fraudulent payments before they happen. When setting up a new payee, pay close attention to any name check result your bank provides, and never ignore a warning that the account name does not match. Consider setting payment limits and alerts on your business accounts.

Regular reconciliation is equally important. Review bank statements and supplier statements frequently, so any unusual payment or missing receipt from a genuine supplier is spotted quickly. The sooner a problem is identified, the greater the chance of recovering funds.

If Something Goes Wrong, Act Immediately

If you suspect you have paid a fraudulent invoice, contact your bank straight away and ask them to try to stop or recall the payment. Report the matter to An Garda Síochána, inform the genuine supplier and review your systems to find out how the fraud occurred. Speed is critical, as funds are often moved on within hours.

It is also worth checking whether your business insurance covers this type of loss, as many standard policies do not include social engineering fraud unless it is specifically added.

Protection Starts With Good Processes

Invoice fraud is a growing risk, but it is also highly preventable. Clear verification rules, proper approval processes, well-trained staff and good security can protect your business from losses that could otherwise take years to recover from.

At McGovern Worn, we help businesses review their financial controls and payment processes to reduce the risk of fraud and costly errors.

If you would like to discuss your business, contact us on or email gillian_duffy@mcgw.ie or visit mcgw.ie.

Disclaimer: This article is based on publicly available information and is intended for general guidance only. While every effort has been made to ensure accuracy at the time of publication, details may change and errors may occur. This content does not constitute financial, legal or professional advice. Readers should seek appropriate professional guidance before making decisions. Neither the publisher nor the authors accept liability for any loss arising from reliance on this material.