Fake Invoice SWIFT Payment Diversion

Verdict Summary

Fake Invoice SWIFT Payment Diversion shows strong scam indicators common in fraud targeting Indian users. Do not share OTPs, passwords, or payments — verify the source independently.

Risk score: 9/10 · Severity: Critical · Verdict: Suspicious

Scam Intelligence: Fake Invoice SWIFT Payment Diversion

Proprietary signals from BharatSecure's scam-tracking database.

How Fake Invoice SWIFT Payment Diversion Works

Overview: This advanced scam targets Indian exporters and manufacturers, especially SMEs in sectors like textiles, auto parts, steel, and chemicals. Fraudsters impersonate legitimate suppliers and convince businesses to divert payments for raw materials or orders into fraudulent accounts, often involving cross-border SWIFT transfers. As India's export economy relies on routine overseas payments, these scams are devastating—costing victims crores and endangering business continuity. How It Works: The scam starts with hackers gaining access to a supplier's email system or creating lookalike domains. They send convincing emails, often using real purchase order details, warning about an urgent change in bank account due to a 'merger' or 'SWIFT compliance update.' Victims are instructed to pay advances (sometimes as much as 20-50% of order value) to new bank details, often for transactions ranging from ₹10 lakh to ₹50 lakh. Funds are swiftly rerouted through Indian banks to foreign mule accounts, typically in Hong Kong or Dubai, and may be laundered via cryptocurrency. India Angle: These scams have cropped up in all major export hubs—Gujarat, Maharashtra, Tamil Nadu—primarily targeting MSMEs dealing with international suppliers via UPI, IMPS, netbanking, or SWIFT wire. Fraudsters often exploit times of economic rush (year-end, financial closures) and send emails/messages in English and Hindi, sometimes peppered with local dialects. High-value manufacturing clusters and auto sector hotspots in Mumbai, Pune, Surat, and Ludhiana are frequent victims. Real Examples: An auto components firm in Pune receives an email supposedly from their Chinese steel supplier, with the sender's address [ADDRESS_REDACTED].in'. The mail states: 'Dear Sir, due to our latest merger, all payments must be made to our new HSBC Hong Kong account via SWIFT MT103. Please find the updated invoice attached and pay within 24 hours to avoid shipment delays.' Being a trusted partner, the Indian firm pays ₹30 lakh, only to later discover the real supplier never requested such a change. Red Flags: - Emails from address[ADDRESS_REDACTED]. - Sudden urgency for overseas payment mentioning supply chain or currency issues. - Invoices featuring a new beneficiary but referencing the same order. - Beneficiary account in a new country or unrelated company name. - Contact details in email do not match original supplier records. Protective Measures: - Always confirm payment requests with suppliers by calling their registered number—not by replying to email. - Never rely solely on bank details sent over email. - Set up a dual-verification system within your accounts or procurement team for all foreign transfers. - Check invoices for mismatched details and independently verify any changes in beneficiary accounts using the official supplier website. - Enable anti-phishing security and conduct regular staff awareness training. If Victimised: - Immediately alert your bank and request a hold on the transaction. - Report the matter to the local police cyber cell, dial 1930, and file a complaint at cybercrime.gov.in. - Notify the RBI and, if relevant, inform SWIFT officials through your bank. Related Scams: - Courier scam invoices using fake bank accounts. - Phishing attacks targeting payment portal credentials. - Impersonation scams via fake supplier WhatsApp groups.

How This Scam Works — Detailed Explanation

The fake invoice SWIFT payment diversion scam primarily targets exporters and manufacturers in India, particularly small and medium enterprises (SMEs) involved in industries such as textiles, auto parts, and chemicals. Scammers identify potential victims through business directories, social media platforms like LinkedIn, and industry-specific forums. Once they have a list of target companies, fraudsters pose as legitimate suppliers, often creating fake business profiles, websites, and email addresses that closely resemble those of real companies. This careful setup allows them to gain the trust of unsuspecting businesses, luring them into their deceptive web.

Once the connection is established, scammers use a blend of psychological tactics and urgency to push their victims into taking swift action. They send emails portraying a sense of alarm, claiming that their accounts are facing imminent issues—such as a sudden drop in currency value or a delay in supplies. These emails often contain forged invoices urging the victim to divert payments quickly to avoid disruption of supply or unfavorable exchange rates. By leveraging the natural business pressure to maintain operations and avoid delays, scammers create a high-pressure environment, making it difficult for victims to step back and assess the legitimacy of the transaction.

As the scam unfolds, victims receive fraudulent invoices requesting payments to new bank account details, which are typically offshore accounts controlled by the scammers. A real-life example occurred in 2022 when an Indian textile manufacturer reported a loss of ₹10 crore after unknowingly transferring funds intended for raw materials to a fraudulent account that had been presented as the legitimate supplier. Victims often follow a series of steps that lead them deeper into the scam without realizing it; they approve payments based on email communications and without any direct verbal confirmation from their known supplier contacts. Once the money has been transferred via SWIFT, recovering these funds becomes incredibly challenging due to the nature of international banking transfers.

The real-world impact of the fake invoice SWIFT payment diversion scam has been severe in India. According to recent reports from the Ministry of Home Affairs (MHA), businesses have lost an estimated ₹500 crore to such schemes in the past three years. With the Reserve Bank of India (RBI) issuing alerts and guidelines to banks about these fraudulent practices, the issue has garnered attention from CERT-In, which has been advocating for increased cybersecurity measures. Many victims struggle with the financial ramifications, leading to disruptions in their operations and, in some cases, business closures.

To protect themselves, companies must recognize critical red flags that distinguish these fraudulent communications from legitimate ones. Some signs include emails from domains that contain extra letters or slight spelling variations, communication about changes in bank accounts only via email without verbal confirmation, and the presence of new beneficiary details that do not match previous invoices. An additional warning sign is the pressure to act quickly due to made-up emergencies. By staying vigilant and methodical in verifying payment details and communication channels, businesses can guard themselves against falling prey to these sophisticated schemes.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Fake Invoice SWIFT Payment Diversion Target?

General public across India

Red Flags — How to Identify Fake Invoice SWIFT Payment Diversion

• Emails from domains with extra letters or subtle spelling changes
• Bank account changes communicated only via email
• Pressure to pay quickly because of 'supply delays' or 'currency rates'
• New beneficiary details inconsistent with previous invoices
• No verbal confirmation from known supplier contacts

What To Do If You Encounter Fake Invoice SWIFT Payment Diversion

1. Report suspicious activity immediately at 1930 or visit cybercrime.gov.in for guidance.
2. Verify every payment request against previous invoices by contacting known supplier representatives directly.
3. Never change bank account details based solely on email communications—always seek verbal confirmation.
4. Educate staff involved in procurement about identifying scam tactics and potential red flags.
5. Implement robust internal financial controls to manage and authorize all payments.
6. Monitor bank statements and transaction histories closely for any unauthorized or unusual activity.

How to Report Fake Invoice SWIFT Payment Diversion in India

• Call 1930 — National Cyber Crime Helpline (24x7)
• File a complaint at cybercrime.gov.in
• Contact your bank immediately if money was lost
• Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared bank information in a fake invoice scam?

Immediately notify your bank and report the incident to the cybercrime helpline at 1930. Change your account passwords and enhance security measures.

How can I identify a fake invoice from a legitimate supplier?

Look for discrepancies in email addresses, pressure tactics for quick payments, and compare new beneficiary details with past transactions. Always get verbal confirmation.

How do I report this type of scam in India?

You can report the scam at 1930 or submit a complaint at cybercrime.gov.in. Additionally, inform your bank immediately about the fraudulent transaction.

What are the steps for recovering money lost in this scam?

Contact your bank as soon as possible to initiate a recovery process. They can provide steps for reporting and may assist in freezing the fraudulent account.

A plain-language breakdown based on 100 real reported scams of this type.

Related Scams in India

• AI Deepfake & Synthetic Document Scams
• AI Deepfake Bank Alert Scams
• AI Deepfake CEO Fraud (BEC Scam)
• AI Deepfake Exchange Impersonation
• AI Deepfake Executive Authorization Scam

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.