How to check a request to change bank details

Fraudsters often email a small business pretending to be a supplier and ask for payments to go to a new account. Work through the free Payment Check Companion first, before any payment step.

  1. Do not reply to the email or use the phone number in it.
  2. Find a supplier contact you have independently obtained and already verified. An old invoice is not trusted by default, because it may have been forged or copied from a fraudulent email.
  3. Contact them through that route and ask them to confirm the actual new account details.
  4. Follow your business's approval rules, including a second person's approval.
  5. Pay only after that independent verification and approval.
  6. If you choose to send a small first transfer, do it only after steps 1 to 5. Check receipt through the trusted contact. Receipt alone does not prove who owns the account or make later payments safe.

If you cannot complete these checks, stop and do not pay the new account.

Source: Take Five to Stop Fraud, invoice and mandate fraud.