Windows Autopatch: Some admins may have seen Quality and Feature Update reports incorrectly showing "SYSTEM_SCRUBBED" in Windows Autopatch (incident).

View Microsoft 365 Status

Knowledge Base / Security Awareness / How to Handle a Fake Invoice or Payment Redirect Attempt

Security Awareness

How to Handle a Fake Invoice or Payment Redirect Attempt

Use this guide for fake invoices, vendor impersonation, wire fraud attempts, and suspicious payment changes.

Do not send payment

Never change payment details or approve urgent payment requests based only on an email or text message.

What to do

Pause the transaction immediately.
Do not reply to the suspicious message.
Verify the request using a known phone number or approved business contact method.
Create a ticket and include the sender, invoice, and any requested payment changes.
If funds were already sent, escalate immediately.

Common indicators

Urgent pressure to pay today
Banking details changed unexpectedly
Sender domain is slightly misspelled
Invoice format looks unfamiliar or incomplete

Create Ticket Open Scam Center