An email lands saying your subscription just auto-renewed for a few hundred dollars, with a number to call if you want to cancel. Panic makes you dial — and that is exactly the plan. Fake invoice and billing scams turn a fabricated charge into a way to reach you. Our GetMyPassword team explains how to recognize a fake invoice or billing scam and protect yourself.
How the scam works
You receive an invoice, receipt or renewal notice for something you never bought — antivirus, a subscription, a large order. The goal is to make you react. Some versions want you to call a “support” number, where a scammer talks you into paying or installing remote-access software. Others hide malware in an attached “invoice,” or simply hope you pay a bill that was never real.
Red flags to watch for
- A charge you do not recognize, often for a surprisingly large amount.
- Pressure to call a number “immediately” to dispute or cancel it.
- An attachment you are urged to open to “view the invoice.”
- Vague or mismatched details — odd sender address, generic company, no real account info.
- Requests for card details or remote access to “process your refund.”
How to protect yourself
Do not act on the message itself. Never call the number or open the attachment in a suspicious invoice. Instead, check directly: log into the real service or your bank and card statements yourself to see if any charge actually exists. If you want to query a real company, use the contact details from its official website. And remember that a genuine refund never requires remote access to your device or your card number read aloud.
The phone number in a scary invoice connects you to the scammer, not the company. Always look up the real number yourself — the one in the message exists only to put you on the line with the person behind the scam.
Keep your accounts and money safe
These scams aim for your money, your device and your logins. So protect all three: never grant remote access or read out card details to an unexpected caller, watch your statements for charges that are genuinely real, and secure every account with a unique password from our password generator and two-factor authentication. A fake bill only works if it makes you act before you check.
Frequently asked questions
How do I recognize a fake invoice scam?
Watch for a charge you do not recognize, pressure to call a number immediately, an attachment urging you to “view the invoice,” vague or mismatched sender details, and requests for card details or remote access to “process a refund.”
Should I call the number on a suspicious invoice?
No. The number in a fake invoice connects you to the scammer. Instead, check your real account or bank statements directly, and if you need to contact the company, use the phone number from its official website.
What should I do if I already responded?
If you installed anything or gave remote access, disconnect and run a security scan. If you shared card details, contact your bank right away. Change the passwords on any accounts you may have exposed and turn on two-factor authentication.