Halborn

Call the vendor on a number you already have on file. Do not reply to the invoice email or use a contact detail from the invoice itself.

Subject

Confirm bank details for invoice BILL-87651

Draft message

Hi HALBORN SECURITY team,

We received invoice BILL-87651 for USD 18,986.00. The beneficiary bank account printed on it (ACH-WELLS-****9982) is different from the account we have used for your last 2 payments (ACH-CHASE-****4521).

Before we release this payment, can you confirm — on this call / a known number — that you have intentionally changed your bank details, and read back the full new account number so we can match it?

If you did not request this change, please treat this as a possible invoice-fraud attempt and we will hold the payment.

Thanks,
Acme Holdings — Accounts Payable