Supplier Bank Detail Changes Sent on WhatsApp
A supplier's WhatsApp says their bank account has changed. It may be a hacked account or an impostor. Apply the same verification rules as email: call a known number first.
Payment redirection fraud used to arrive mainly by email. Now it also arrives on WhatsApp: a supplier's number sends a short note and a PDF with new bank details. Pay it and the money goes to a criminal's account, often with little chance of recovery.
How it happens
- The supplier's WhatsApp is hacked, and the fraudster uses the real chat history. See stolen accounts.
- A new number claims to be the supplier's accounts team.
- An invoice PDF is edited with new details. See suspicious invoices in chats.
The rule
Any new or changed bank details are confirmed by a phone call to a number you already had, before any payment. The same rule applies to email, WhatsApp and letters.
Make it stick
- Tell suppliers in advance that you verify all changes by phone.
- Require two people to approve new payees.
- Make a small test payment to new details and confirm receipt by phone.
- Keep a record of each verification call.
If you paid the wrong account
Call your bank immediately to attempt a recall, inform the supplier, and report the fraud. See what to tell your bank.
Related: changed bank details fraud and vendor email compromise. For more, see our guide to WhatsApp scams.
Frequently asked questions
The message came from our supplier's usual number. Is that enough?
No. Their WhatsApp may be hacked. Confirm by phone on a number you already had, and speak to someone you know.
What if the supplier is abroad or hard to reach?
Delay the payment until you can confirm. Genuine suppliers expect checks; fraudsters push urgency.
We already paid the new account. What now?
Call your bank immediately to try to recall the payment, then tell the supplier and report the fraud.
Sources
- Cybersecurity for Small Business, US Federal Trade Commission
- Small organisations guide to cyber security, UK National Cyber Security Centre
- About suspicious messages and scams, WhatsApp Help Center
