In plain English
How fake receipt messages work, what warning signs to look for, and how to verify a transaction without using a suspicious link.
Key points
Point 1
Unexpected receipts are designed to trigger fast reactions.
Point 2
Verify the underlying account or payment record independently.
Point 3
Do not use contact details, links or attachments supplied by a suspicious message.
Fake receipt messages are effective because they create urgency: an unfamiliar purchase, a large charge, a renewal or a refund may push someone to click before checking the transaction independently.
Common fake-receipt patterns
- A message claims that an expensive order was placed.
- A phone number is presented as the only way to cancel.
- An attachment is labelled as an invoice or receipt.
- A link asks for account credentials, payment details or remote access.
- The sender uses a look-alike domain or unrelated email service.
A real transaction can still be used as bait
Attackers may imitate a familiar merchant, while compromised marketing or delivery systems can send messages from infrastructure that appears legitimate. The safest check is the underlying account or payment record—not the appearance of the message.
How to verify safely
- Do not call numbers or open links in the unexpected message.
- Open the merchant app yourself or type the known website address.
- Check your bank, card or payment account through its normal access method.
- Compare merchant, amount, date and transaction status.
- Contact the merchant or payment provider using a number from an official source.
What not to provide
A receipt inquiry should not require remote control of your device, gift-card payments, cryptocurrency transfers, one-time banking codes or complete card credentials.
Preserving evidence
Keep the message, sender details and screenshots when reporting suspected fraud, but avoid forwarding malicious attachments to other people. Use the reporting tools provided by your email, phone, merchant or payment provider.
Practical checks
- Open the merchant or payment account through your usual route.
- Check the sender domain and message headers where practical.
- Report unauthorized charges promptly through the payment provider.