Confirm an unexpected change of bank details using a phone number you already know. A real conversation history, accurate invoice details and a Swiss IBAN do not prove that the change was authorised.
When almost everything looks right
A manipulated invoice may have the correct supplier, service and amount; only the destination account changes. Attackers may compromise a mailbox or join an ongoing conversation. Be especially careful with messages asking you to ignore a previous invoice or use a new account.
Make a precise independent check
- Use a number from existing records, not the new email.
- Ask whether the IBAN changed for this exact invoice.
- Compare the complete beneficiary name and IBAN.
- For business payments, follow the existing second-person approval process.
Check QR invoices and act quickly after payment
Before approving a QR payment, read the details extracted by your banking app. A readable QR code does not verify the payee. If you have already paid a suspicious account, contact your bank immediately about possible protective steps, and keep the invoice and messages. Whether the money can be recalled depends on the specific case.
A new account number needs a fresh, independent confirmation.
Sources and further help
The linked information supports this guide. It does not imply that these organisations work with or endorse MailMigo.