ProofRelayGuides
Practical, plain-English guidance on the fraud that takes money out of business bank accounts — written to be useful whether or not you ever use our product.
Is this invoice a scam? Seven checks before you pay
The seven things worth checking on an invoice that doesn't feel right, and the one check that actually settles it.
A supplier emailed new bank details. What should you do?
The single most common way businesses lose large sums — and a short, repeatable process that stops it.
You've paid a scammer. What to do in the first hour
If money has already gone, speed decides the outcome. The order of operations that gives you the best chance.
How to stop invoice fraud in a small business
A practical checklist across email, process, banking and people — with an honest note about which items matter most.
What is business email compromise?
The plain-English explanation of the attack, the five shapes it takes, and why technology alone doesn't stop it.
How to verify a supplier's bank details properly
The verification most businesses do is the one that fails. Here's how to do it so it actually catches fraud.
Who pays when invoice fraud happens?
The question everyone asks after the money has gone, and the uncomfortable answer most businesses discover too late.
Settlement fraud: why conveyancing is the top target
Large, time-pressured, irreversible: why property settlements attract the most determined attacks, and what actually holds.
Payment fraud in strata management
Owners' money, constant contractor invoices, and one person approving them — the combination attackers look for.
Subcontractor payment fraud in construction
Legitimate bank-detail changes are normal in construction — which is exactly what makes the fraudulent ones work.
A bookkeeper's guide to stopping client payment fraud
You could do every one of these checks by hand. The control is doing them every time, for every client — and being able to show you did.
Someone replied inside our email thread asking for payment. Is it real?
A message appears in an existing thread, from a familiar name, asking for payment to a new account. Why context is not evidence — and which of the two variants a domain check can actually catch.
Got an invoice in front of you right now?
Paste it into the free checker. No account, and nothing you paste leaves your browser.
Check an invoice