Free invoice fraud test for finance teams · 5 minutes
Can your team spot a fake invoice?A free 5-minute test on fake invoices, supplier bank changes, CEO fraud and deepfake calls.
lost to business email compromise in 2025, according to the FBI's Internet Crime Report. FBI IC3
paid by a finance employee after a video call where the CFO was a deepfake (Arup, 2024). Fortune
realistic requests: bank changes, CEO emails, deepfake calls, gift cards, payroll — and two genuine ones.
Fake invoices land in the inbox first.
T-Frame is a free Chrome extension that checks Gmail, Outlook and WhatsApp Web messages, flags look-alike senders and risky requests, and warns before a dangerous link opens.
Free. Install, sign up with your email, done.
T-Frame works on your computer, in Chrome.
Most of these arrive by email.
T-Frame is a free Chrome extension that checks your Gmail, Outlook and WhatsApp Web messages, shows the risk and why — and warns you before you open a dangerous link. A second pair of eyes for the payment inbox.
Free. Install, sign up with your email, done.
T-Frame works on your computer, in Chrome.
How to spot a fake invoice — and the other patterns behind payment fraud
Fake invoices & bank changes
A supplier's “new bank account” arrives by email — just before a big payment.
Read →CEO fraud
An urgent, secret request from “the boss”, from an address that isn't quite right.
Read →Deepfake video calls
When the CFO on screen isn't the CFO.
Read → Free templatePayment verification checklist
Ten rules to agree with your team. Printable.
Get it →Are criminals already copying your company?
Check for look-alike domains of your brand in seconds — the first step of most invoice fraud.
Train the rest of the company
Questions
What is business email compromise (BEC)?
A fraud where criminals impersonate a supplier, executive or colleague — usually by email — to get a business to pay money to an account they control. It's one of the costliest cybercrimes: the FBI's 2025 report counted about $3.05 billion in BEC losses.
How do I train my finance team to spot payment fraud?
Run short, realistic drills like this one, then agree a written verification rule: no bank change without a call-back on a known number, two approvals above a threshold, and no payment through a side channel such as chat or a video call.
Can a video call really be faked?
Yes. In 2024 a finance employee at Arup's Hong Kong office paid about $25.6 million after a video call in which the CFO and colleagues were deepfakes. A video call can no longer approve a payment by itself.
How can you tell if an invoice is fake?
Check the sender domain letter by letter, be suspicious of any change of bank details, and never trust a deadline written into the email. The only reliable test is a call-back: phone the supplier on the number you already have on file — never the one in the invoice.
Is this test free for companies?
Yes — free, no sign-up, works in any browser. Share the link with your team and compare scores.