We have been made aware of a supplier whose customer lost a five-figure sum from a new scam we haven’t heard of before.

1. Basically, the supplier sent a customer a proforma invoice.

2. The supplier’s email was intercepted somewhere between him sending, and the customers inbox.

3. The scammer then hacked the pdf on the email, changed the bank details and resent it to the customer (using an email looking similar to the suppliers) saying that the pdf proforma had been updated.

4. The customer without checking paid the new proforma.

5. The hackers collected the money and closed the fraudulent bank account.

This is a difficult one to identify before it has happened, but asking your customers to always check with you any changes to bank payment details could help.