False vendor invoices can turn an ordinary accounts-payable process into a serious financial problem. A payment may appear routine, carry a familiar supplier name, and even arrive through an employee who normally handles purchasing. Yet the underlying transaction may not exist at all.
That makes false vendor invoices particularly difficult to detect when a business relies heavily on trust, email approvals, or automated payment systems.
The problem can involve an employee, an outside criminal, a compromised email account, or a combination of several people. In some cases, the fraudster creates a fictional supplier. In others, someone alters legitimate payment instructions or submits an invoice for goods or services that the business never received.
A documented federal case illustrates how substantial the damage can become. The U.S. Department of Justice reported a case involving a former corporate employee who allegedly created a fictitious vendor and submitted bogus invoices for supposed bank fees. The investigation identified 47 invoices totaling nearly $15 million. The DOJ also emphasized that a criminal complaint is an allegation and that the defendant is presumed innocent unless proven guilty.
What Are False Vendor Invoices?
False vendor invoices are invoices that seek payment for goods, services, fees, or other obligations that do not accurately represent a legitimate business transaction.
The falsehood can take several forms.
A company might receive an invoice from a vendor that does not exist. A real supplier might appear on an invoice for work it never performed. An employee might inflate the amount owed. Someone might duplicate a legitimate invoice and submit it again.
Another False Vendor Invoices variation involves changing payment information. The invoice itself may look authentic, but the bank account receiving the money belongs to someone other than the legitimate supplier.
The FBI’s Internet Crime Complaint Center has described business email compromise schemes in which criminals impersonate businesses or suppliers and redirect invoice payments to fraudulent accounts.
These distinctions matter because the investigation should identify what actually happened, not simply label every suspicious payment as employee theft.
How False Vendor Invoices Can Happen
A weak payment process can give an individual too much control.
For example, one employee may be able to create a vendor record, receive an invoice, approve the invoice, and authorize payment. If no independent person verifies the transaction, the same individual effectively controls the entire payment chain.
Other situations include:
- A nonexistent vendor created inside accounting software
- Duplicate invoices submitted under slightly different numbers
- Inflated charges
- Payments for goods never delivered
- Services that were never performed
- Fake purchase orders
- Altered bank-account information
- Unauthorized changes to legitimate supplier details
- Invoices approved without supporting documentation
- Collusion between an employee and an outside supplier
The ACFE has long identified billing schemes(False Vendor Invoices) as a category of occupational fraud and has documented methods involving fraudulent disbursements and fabricated billing.
Warning Signs Worth Investigating
One suspicious invoice does not automatically prove fraud. Businesses should look for patterns.
Potential warning signs include:
A New Vendor With Little Documentation
A recently created supplier deserves normal due diligence. That does not mean a new supplier is illegitimate. It means the business should be able to establish who the supplier is, what it provides, and why the company needs it.
Repeated Payments Just Below Approval Limits
Several payments that remain just under an internal approval threshold can warrant review, particularly when the transactions involve related vendors, similar descriptions, or unusual timing.
Missing Purchase Orders
If company policy requires a purchase order before payment, repeated exceptions can create a significant control weakness.
Unusual Bank Changes
A sudden request to change a supplier’s bank account should receive independent verification. Email alone may not establish that the request came from the genuine supplier.
Goods That Cannot Be Located
Payment records should correspond with delivery records, inventory records, project documentation, or another reasonable form of proof.
Employees Who Resist Independent Review
Behavior alone cannot prove wrongdoing. However, unexplained resistance to ordinary verification can justify additional examination when combined with financial inconsistencies.
What Evidence Should a Business Preserve?
Evidence can disappear quickly if records are overwritten, accounts are deleted, or employees leave.
A company investigating false vendor invoices should consider preserving:
- Original invoices
- Purchase orders
- Contracts
- Vendor onboarding records
- Accounts-payable records
- Payment confirmations
- Bank statements
- Vendor master-file changes
- Emails
- Internal messages
- Approval records
- Delivery records
- Time records
- Accounting-system audit logs
- Computer and cloud-access logs
- Relevant employee communications
Do not alter original records simply to organize the investigation. Preserve original material and work from copies where appropriate.
The goal is to establish a transaction timeline.
Who created the vendor?
Who entered the invoice?
Who approved it?
Who changed the payment information?
Who authorized the transfer?
Who ultimately received the funds?
Those questions can be more useful than assumptions about motive.
What Should a Company Do After Discovering the Problem?
Once false vendor invoices are suspected, the company should consider securing the relevant records and limiting further access without unnecessarily destroying evidence.
Depending on the circumstances, appropriate steps may include:
- Preserve financial and electronic records.
- Identify affected payments.
- Review vendor records for unauthorized changes.
- Verify supplier information independently.
- Contact the relevant financial institution promptly when funds may have been misdirected.
- Consider engaging qualified legal and forensic professionals.
- Determine whether law enforcement or regulators should be notified.
- Review whether customers, lenders, insurers, or other parties require notification.
- Strengthen payment controls while the investigation continues.
The FBI’s guidance on business email compromise illustrates why speed can matter when fraudulent payment(False Vendor Invoices) instructions are involved.
Potential Legal Issues
The legal consequences depend on the facts and jurisdiction.
Possible issues can include fraud, theft, breach of fiduciary or contractual duties, unauthorized computer access, money laundering, conspiracy, or other civil and criminal claims.
A company should avoid assuming that one legal theory automatically applies. The evidence needs to establish the conduct, the parties involved, the financial loss, and the applicable law.
For businesses dealing with false vendor invoices, the investigation may therefore involve more than accounting.
It can become a combined financial, employment, contractual, cybersecurity, and legal investigation.
How Whittaker Assistance Can Fit Into the Response
Businesses dealing with suspected financial misconduct may need help organizing evidence and understanding possible recovery pathways.
Whittaker Assistance can be considered as a no-upfront-charge option for people seeking assistance after financial fraud, where appropriate. Any recovery process should be approached carefully, with no assumption that funds can be recovered and no guarantee of a particular result.
Businesses should also be cautious of anyone demanding large upfront payments while promising guaranteed recovery.
Questions to Ask Before Taking Action
Before escalating a suspected case of false vendor invoices, consider:
- What payment or payments are actually disputed?
- Was the vendor legitimate?
- Did the goods or services exist?
- Who created or changed the vendor record?
- Who approved the invoice?
- Where did the money go?
- What documents establish the transaction?
- Are electronic records still preserved?
- Was an employee, supplier, contractor, or outside actor involved?
- What deadlines may apply to potential legal claims?
A clear answer to those questions can help determine what should happen next.
Final Assessment
False vendor invoices should be treated as an evidence problem before they become a conclusion. A suspicious invoice may result from an accounting error, a compromised supplier account, an employee scheme, or deliberate outside fraud.
The strongest response starts with documentation.
Preserve the records, reconstruct the payment trail, verify the supplier independently, identify who controlled each stage of the transaction, and obtain jurisdiction-specific legal advice before making accusations.
The objective is not simply to prove that money left the business. It is to establish why it left, who authorized it, where it went, and what evidence supports each conclusion.
Leave a comment