What You Need To Know:
If someone is impersonating your business, take action right away. Notify your customers, secure your accounts, report the impersonation and contact your bank if fraudulent payments are involved. A timely response can help minimize financial losses and protect your reputation.
Imagine getting a call from a longtime customer asking why you changed your payment information.
The problem? You didn't.
Business impersonation scams are becoming increasingly common. Criminals pose as legitimate businesses by sending fake invoices, spoofing email addresses, creating fake social media profiles or cloning websites. Their goal is simple: convince your customers to send money to them instead of you.
Beyond financial losses, these scams can damage customer trust and your business's reputation. Knowing how to respond can make all the difference.
How Do Business Impersonation Scams Work?
Business impersonation scams take many forms, but they all rely on one thing: making customers believe they're communicating with your company.
Some common tactics include:
- Sending fake invoices that appear to come from your business.
- Emailing customers from an address that closely resembles your company's email.
- Claiming your business has updated its payment instructions or bank account information.
- Creating fake social media accounts or websites using your business's name and branding.
- Calling customers while pretending to represent your company.
These scams often look convincing because criminals use publicly available information, such as your logo, website, employee names and social media content.
Signs Someone May Be Impersonating Your Business
You may not discover the scam until a customer contacts you.
Watch for warning signs like:
- Customers asking about invoices you didn't send.
- Questions about "new" payment instructions your company never issued.
- Customers saying they've already made a payment you never received.
- Reports of suspicious emails, phone calls or social media messages claiming to be from your business.
- A sudden increase in customer complaints or confusion about payments.
Even one report deserves immediate attention.
What Should You Do Right Away?
1. Verify What's Happening
Gather as much information as possible. Ask customers to forward suspicious emails, invoices or screenshots so you can determine how your business is being impersonated.
2. Notify Your Customers
Do not wait for additional reports before acting.
Use the channels such as your website, social media, email newsletters, or direct phone calls to inform customers about the scam. Clearly communicate:
-
What occurred.
-
What legitimate communications from your business look like.
-
That your payment instructions have not changed (if applicable).
-
How customers can confirm any suspicious requests before sending money.
Clear, proactive communication helps protect your customers and demonstrates your commitment to their security.
3. Contact Your Bank
Your bank can help you determine the steps needed to protect your accounts, safeguard your funds, and monitor for potential fraud—criminals rarely stop after a single attempt. Your bank can also assist you in notifying the appropriate law enforcement agencies.
3. Report the Scam
Depending on how the scam is being carried out, report it to the appropriate platforms or authorities.
This may include:
- Reporting fake social media accounts.
- Reporting phishing emails to your email provider.
- Filing a complaint with the FBI's Internet Crime Complaint Center (IC3).
- Reporting fraud to the Federal Trade Commission (FTC).
- Contacting your local law enforcement agency if necessary.
4. Secure Your Business
Even if your systems haven't been compromised, it's a good time to strengthen your security.
Consider:
- Changing passwords for affected accounts.
- Enabling multi-factor authentication.
- Reviewing employee access permissions.
- Verifying that your email security settings are properly configured.
- Reminding employees to verify payment requests before acting on them.
What If a Customer Already Sent Money?
If a customer sent money to a scammer posing as your business, encourage them to contact their financial institution immediately.
Time matters. While recovering funds isn't always possible, prompt reporting gives financial institutions the best opportunity to investigate and determine whether any recovery options are available.
You should also document the incident and continue communicating with affected customers throughout the process.
How to Help Prevent Future Business Impersonation Scams
While no business can eliminate fraud entirely, you can make it harder for criminals to succeed.
Some best practices include:
- Let customers know exactly how your business communicates.
- Verify any payment instruction changes by phone using a trusted number.
- Train employees to recognize phishing emails and business email compromise scams.
- Monitor your online presence for fake websites or social media accounts.
- Encourage customers to contact your business directly if they receive an unexpected payment request.
Building these habits can help protect both your business and the customers who trust you.
The Bottom Line
Business impersonation scams don't just target your finances—they target your reputation.
The faster you recognize the warning signs, communicate with your customers and report suspicious activity, the better positioned you'll be to minimize the impact.
At Heritage Bank, we're committed to helping businesses recognize fraud and protect what they've worked hard to build. If you suspect fraudulent payment activity involving your business accounts, contact us right away. Our team can help you understand your options and discuss next steps.
Frequently Asked Questions
What is a business impersonation scam?
A business impersonation scam occurs when criminals pretend to represent a legitimate company to trick customers into sending money or sharing sensitive information.
Can someone create fake invoices using my business's name?
Yes. Scammers often copy company logos, branding and contact information to create convincing invoices that direct payments to fraudulent accounts.
What should I do if someone is pretending to be my business?
Gather evidence, notify your customers, report the impersonation to the appropriate platforms or authorities, secure your accounts and contact your bank if fraudulent payments are involved.
How can customers verify that a payment request is legitimate?
Encourage customers to contact your business using a phone number or email address they already know is legitimate—not the contact information included in a suspicious message.
Can my bank help if customers sent money to a scammer?
If customers sent money to a scammer posing as your business, they should contact their financial institution immediately. While recovery isn't guaranteed, prompt reporting gives the bank the best opportunity to investigate the transaction and discuss any available options. Your bank can also help you understand next steps, recommend ways to strengthen your security and advise you on responding if the scam continues to target your business.
This article is provided for general educational purposes only and is not intended to provide legal, cybersecurity or financial advice. Fraud situations vary, and recovery of funds is not guaranteed. If you believe your business or accounts have been affected by fraud, contact Heritage Bank and the appropriate authorities as soon as possible.