Suspicious Documents and Invoices in WhatsApp Chats
Invoices, receipts and 'updated payment instructions' sent as PDFs or images in WhatsApp chats can redirect payments or hide malware. How to check before you pay or open.
Many small businesses and freelancers send invoices, quotes and receipts on WhatsApp. That makes chats a target: a fake invoice, a changed account number, or a "document" that is really a phishing link or an app.
What to watch for
- New bank details on an invoice from a known supplier. See supplier bank changes on WhatsApp.
- Invoices you did not expect, for services you never ordered.
- "Click to view the invoice" links leading to login pages. See document share phishing.
- Files that are really apps, for example ending in .apk. See malicious files.
- Edited receipts used to "prove" a payment. See fake payment screenshots.
Before you pay
- Match the invoice to an order or agreement you know about.
- Compare the bank details with previous payments.
- If anything changed, call the supplier on a number you already have.
- For businesses: require two people to approve new or changed payees.
A real contact's number is not proof. Their WhatsApp may be hacked. See how stolen accounts are used.
Related: invoice phishing by email and changed bank details fraud. For more, see our guide to WhatsApp scams.
Frequently asked questions
A supplier sent an invoice with new bank details on WhatsApp. Is it real?
Call the supplier on a number you already have before paying. Changed bank details by message are a classic fraud sign.
Can a PDF on WhatsApp be dangerous?
PDFs can contain links to phishing pages, and some files are disguised apps. Check the file type and keep your apps updated.
How can a business reduce invoice fraud on WhatsApp?
Agree with suppliers that bank detail changes are only accepted after a phone call, and require two people to approve new payees.
Sources
- About suspicious messages and scams, WhatsApp Help Center
- Cybersecurity for Small Business, US Federal Trade Commission
- Small organisations guide to cyber security, UK National Cyber Security Centre
