Is it a scam? ← For families
For sole traders & small teams

The sixty-second second opinion, before you pay.

The invoice that looks right. The supplier whose “bank details have changed”. The ATO email that arrived in BAS week. Forward it — from your phone or your inbox — and a plain-English verdict comes back before the money moves. Nothing to install, nothing to connect to your books.

Start free month Try a free check — no signup

False billing was the most reported scam type hitting Australian small businesses, and payment-redirection scams cost Australians $166.8 million in 2025 — up 9.3% in a year. Small and micro businesses carry most of the business losses. Sources: NASC, Targeting Scams 2025 · ASIC small business warning.

Four real checks, four real replies
Forwarded“Please note our banking details have changed for all future invoices. New account: BSB 062-000…”
ReplySCAM warning - changed bank details is how invoice fraud steals big amounts. Don't pay the new account.
Reason: PAYMENT_REDIRECTION
Forwarded“You have a new invoice INV-4471. View it in Xero: xero-invoices-view…”
ReplySCAM - that link is not the real login page. Never sign in from a link in a message. Open the app or type the address yourself.
Reason: SAAS_LOGIN_LURE — the message names Xero; the link goes somewhere else.
Forwarded“Settlement is today. If you can't get to the bank, raise your daily limit and send smaller amounts…”
ReplySCAM - no real solicitor or business asks you to raise your transfer limit or split a payment. Ring them on a number you find yourself.
Reason: BANK_CONTROL_COACHING
Forwarded“It's Mark. Process an urgent payment before 3pm. Keep this between us until the deal is announced.”
ReplySCAM warning - being asked to keep money secret from family or your bank is the clearest sign there is.
Reason: SECRECY_INSTRUCTION

These are the real replies, word for word, from the same templates the service sends. Every verdict names the pattern it matched — the full methodology, including results against third-party scam catalogues, is published at how verdicts are made.

Built for the way business email is attacked
1

The forwarded sender is pulled back out

Forward an email and the original From address is extracted from the quoted text — Gmail, Outlook or Apple Mail — and checked for one-letter lookalikes, brand-new domains and blocklist hits. That extra “t” in a fake bank domain is exactly what this exists to catch.

2

Payment behaviour, not just payment words

“Our details have changed” beside new account numbers. Being told to raise your transfer limit or split a payment — instructions no legitimate payee ever needs, because they exist to walk you around your bank's controls.

3

The login pages that start invoice fraud

A fake Xero, MYOB or myGovID sign-in steals the password, and the mailbox is where every payment-redirection scam begins. If a message names a platform and links anywhere else, that's a scam verdict.

4

A first-time payee is always worth one phone call

A genuine settlement or first invoice can look identical to fraud — so the honest answer is “be careful”, with the one instruction that works either way: ring them on a number you found yourself, and read the account details back. That call is the control that saves the money.

One plan, whole team
A$25/month  ·  A$249/year
It's BAS season. The fake-ATO wave peaks between July and October — if an “ATO” email is going to reach you, it's now. One caught invoice pays for a decade of this.

Running something bigger — a franchise group, a practice with many staff, or an institution? The partners page is for you.