Scammers love small businesses for a simple reason: money moves fast, lots of people can approve a payment, and nobody has time to double-check every email. The good news is that almost every payment scam relies on the same handful of tricks. Learn them once and you'll spot them for good.
Why businesses are targets
A family might send a scammer a few hundred dollars. A business pays invoices for thousands, every week, often to suppliers it has never met in person. Scammers know that a busy owner or office manager is more likely to pay an invoice that looks routine than to question it.
The rule that stops most of these: never change where money goes based on an email or text alone. Confirm by phone, on a number you already have.
The five scams to know
1. "Our bank details have changed"
An email that looks like it's from a supplier, contractor or even your landlord says their bank account changed and asks you to send the next payment somewhere new. Sometimes the email really does come from their account, because it was hacked. That's why the email address alone isn't proof.
2. The boss who needs gift cards
A text or email that appears to come from the owner or a manager asks an employee to buy gift cards "for clients" and send the codes, quickly and quietly. Gift cards are popular with scammers because they're nearly impossible to trace or reverse.
3. Fake invoices and renewal notices
Official-looking invoices for things you didn't order: domain renewals, directory listings, trademark registrations, "SEO services." They're designed to slip through with the real bills.
4. "Your Google listing will be removed"
A caller claims to be from Google and says your Business Profile will be suspended unless you pay to verify it. Google doesn't call businesses to charge for their listing.
5. Look-alike login pages
An email says your mailbox is full, your account is locked or a document is waiting, and links to a page that looks exactly like Microsoft 365 or Google. Enter your password and the scammer now has your email, which is how many of the scams above start.
Five habits that stop them
- Call to confirm any payment change. Use the phone number from a past invoice or your records, never the one in the email.
- Two people for unusual payments. Any new payee or changed account gets a second set of eyes before money moves.
- Turn on two-step login for email, banking and anything that holds customer data.
- Slow down on urgency. "Today," "final notice" and "keep this quiet" are the scammer's best tools. A real partner will understand a five-minute phone call.
- Make it safe to ask. Tell your team you'd always rather they double-check than pay. Scammers count on people being afraid to question the boss.
If you've already paid
Act fast. Call your bank right away and ask them to stop or recall the payment; the sooner they know, the better the chance. Change any passwords you entered, turn on two-step login, and report it to the FTC at ReportFraud.ftc.gov and the FBI at ic3.gov. Then tell your suppliers, so they can warn anyone else the scammer might target.