Home Help Security centre Fraud awareness Email scams - Payment requests Current Page

Intercepted emails scams - Payment requests

  • How do intercepted email scams work?

    The aim of this type of scam (also known as push payment fraud) is to get you to voluntarily send, or authorise a payment to the scammer who has sent the email. Often, they will intercept or hack your email or another account involved in a transaction such as buying a house, paying for building work or booking a holiday – so it’s important to be extra vigilant at these times and double check emails from solicitors, builders or travel agents.

    The aim of this type of scam (also known as push payment fraud) is to get you to voluntarily send, or authorise a payment to the scammer who has sent the email. Often, they will intercept or hack your email or another account involved in a transaction such as buying a house, paying for building work or booking a holiday – so it’s important to be extra vigilant at these times and double check emails from solicitors, builders or travel agents.

  • How to spot the signs

    • you are asked to send a second payment to a supplier but the account details have changed
    • the sender requests an urgent payment or pressures you into providing your details
    • check the sender’s email address. Scammers often set up a similar looking email address to the genuine company. Changes can be very small, often by one character.
    • the email contains bad grammar, spelling or is poorly written
    • hovering over the sender’s name reveals a random address
    • there are suspicious links or attachments within the email.
    • you are asked to send a second payment to a supplier but the account details have changed
    • the sender requests an urgent payment or pressures you into providing your details
    • check the sender’s email address. Scammers often set up a similar looking email address to the genuine company. Changes can be very small, often by one character.
    • the email contains bad grammar, spelling or is poorly written
    • hovering over the sender’s name reveals a random address
    • there are suspicious links or attachments within the email.

  • How to stay safe

    • check the sender’s website is secure ­– the web address should start with HTTPS with a padlock on the left of the browser
    • talk to the company to check the details of the request. Use a phone number from a trusted source such as their website, not contact details provided in the email.
    • speak to a named contact at the start of the process and don’t hesitate to phone them if you have concerns
    • if you are asked to pay money to a new account, verify it by speaking to a person whose voice you recognise
    • check the sender’s website is secure ­– the web address should start with HTTPS with a padlock on the left of the browser
    • talk to the company to check the details of the request. Use a phone number from a trusted source such as their website, not contact details provided in the email.
    • speak to a named contact at the start of the process and don’t hesitate to phone them if you have concerns
    • if you are asked to pay money to a new account, verify it by speaking to a person whose voice you recognise

Worried that you've been targeted?

If you think you've been the victim of any scam, it's important to call us as soon as possible.

Call 03 456 100 100 (Lines are open 24/7, 365 days a year).