islegit.email

Why fake invoices fool careful people

A fake invoice doesn't try to trick a careless person. It copies a company you already trust, sails through your spam filter, and asks for one small payment through a link. That's the whole trick.

The pattern is always the same

Almost every fake-invoice scam follows three steps:

  1. It impersonates a real, well-known company — a healthcare biller, a parcel service, a telecom provider.
  2. It looks identical to a genuine message. The logo, the tone, the layout — all copied.
  3. It adds a payment link, and a reason to hurry: a deadline, a fee, a threat.

The one thing that's almost always wrong is the sender's full email address and the link — the two things people glance past.

How to stay safe in ten seconds

  • Check the sender's full address, not just the display name.
  • Don't click the payment link. Open the company's site yourself and pay there.
  • When something feels off, slow down. Urgency is the scammer's main tool.

Still not sure about an email? Forward it to check@islegit.email and get a clear verdict in under a minute.

Check an email

Frequently asked

How can a fake invoice look so real?

Scammers copy a genuine email almost exactly — the logo, the wording, even the layout. The only thing that's different is the sender address and the payment link. Everything you actually look at seems right.

What's the safest way to pay an invoice I'm unsure about?

Never use the link in the email. Open the company's website yourself by typing the address, or use their official app, and pay from there. If you can't find the invoice that way, it probably isn't real.