2 min read
How the scam works
In invoice-redirection fraud, a criminal — often after compromising a supplier's email — sends a real-looking invoice or a 'we've changed banks' notice, asking you to pay a new account. In mandate fraud, they pose as an existing supplier or service and ask you to update the bank details you already hold. In both, the money leaves for a criminal account and is hard to recover. This is one of the most costly frauds affecting UK businesses.
The one step that stops it
Whenever bank details are new or changed, verify by phone on a number you already trust — from a previous invoice, a contract, or the supplier's official website — never the number on the suspicious message. A thirty-second call ('are these your new account details?') defeats the entire scam. Build this into your payment process as a rule, not an exception.
How this applies to Credit Corp
We will never email or text you to change the bank account your repayments are collected from and ask you to confirm through a link. If you genuinely need to change your repayment account, you do it yourself by signing in — see changing your repayment bank account. Any message pushing you to redirect a Credit Corp payment to a different account is fraud; report it.
Protect the whole company
Make sure everyone who can pay a bill knows the verify-by-phone rule, and require a second person to approve any change of supplier bank details. Turn on security alerts so any change to your Credit Corp bank details is flagged to you instantly.
Frequently asked questions
A supplier emailed new bank details — is that normal?
It can be legitimate, but treat it as unverified until you confirm by phoning them on a number you already hold. Never use the number in the email itself.
Can Credit Corp change my repayment account by email?
No. We never request a repayment-account change by email or text. You make any change yourself after signing in, and we alert you when it happens.
If I've already paid a fraudulent invoice, what do I do?
Contact your bank immediately to try to recall the payment, report it to Action Fraud, and warn the genuine supplier. Speed is critical to any chance of recovery.
Related reading
Changing your repayment bank account
You can change the account your repayments come from yourself, in your settings. Because it is sensitive, we…
Read →
Turning on security alerts for your account
Security alerts email you the moment something sensitive changes — a new sign-in, a password reset, a change…
Read →
Reporting suspected fraud to Credit Corp
If you spot something wrong — a scam pretending to be us, a strange login, an unexpected change — report it…
Read →
How to recognise genuine Credit Corp communications
Knowing what a genuine Credit Corp message looks like is your best defence against impersonation. We will never…
Read →Funding for UK limited companies
Credit Corp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.