Match the supplier identity
Compare the sender domain, reply-to address, invoice branding, ABN or business identifier, payment details, and the supplier contact already saved in your records.
Pause on bank-detail changes
Treat any changed BSB, account number, wallet address, or payment destination as high risk until confirmed through a known phone number or supplier portal opened directly.
Look for urgency and secrecy
Invoice fraud often asks for same-day payment, quiet handling, or bypassed approval. That pressure is itself a useful risk signal.