SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/sec-fake-invoice

An email includes an invoice you do not recognize and asks you to click to pay. What does the FTC say?

It is fake. The link can carry malware.

Start playing free

  1. It is probably a billing mistake to fix quickly
  2. The invoice is fake and the link may carry malware ✔
  3. It is safe if it mentions a real vendor

Why: Scammers send invoices for things you never ordered, hoping you click to dispute or pay. Check with your accounts team before you touch the link.

Huh, didn't know that: The FTC's list of phishing stories also includes fake government refunds and free coupons.

The dad joke
How do you eat a hard drive? One byte at a time.
Like this card?
Play the game

References

Answer: The invoice is fake and the link may carry malware. Scammers send invoices for things you never ordered, hoping you click to dispute or pay. Check with your accounts team before you touch the link.

  1. FTC: How To Recognize and Avoid Phishing Scams consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams
    include an invoice you don’t recognize
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyThere's a QR code sticker on the parking meter. What's the smart move before you pay?Security & PrivacyHow often does the NSA suggest turning your phone off and back on?Security & PrivacyA website shows a padlock and https. What does that tell you?

That's stuff everyone should know.