Homeowner payment verification guide
A contractor invoice scam can look convincing because the message may use a real company name, your name, and details about a project already underway. The safest response is not to study the email harder. Stop, verify the request through a separate channel, and call the contractor using a number you already trust.
Contractor scams are not limited to strangers at the door. Criminals can imitate a contractor’s email address, compromise a real mailbox, copy an invoice format, or send new payment instructions at the exact moment a homeowner expects a bill. That is why a polished logo and accurate job details do not prove that a payment request is legitimate.
Why Widespread is sharing this: Widespread Solutions published a proactive customer alert in its January 2026 newsletter. No Widespread customers were known to have been affected at that time. The goal is to give Richmond-area homeowners a simple verification routine before money moves.
How a fake contractor invoice email works
A fake invoice email usually depends on one of two approaches. In the first, a criminal impersonates the contractor using a lookalike email address, display name, or copied signature. In the second, someone gains access to a real business or customer email account and quietly watches the conversation until an invoice is expected. The criminal then sends altered payment instructions from an account that may appear familiar.
The FBI’s Internet Crime Complaint Center calls this broader pattern Business Email Compromise, or BEC. Its guidance specifically recommends using a secondary channel to verify changes in account information and checking the sender address and links carefully. For a homeowner, that secondary channel is usually a phone call to the contractor’s established office number.
The danger is highest when the message changes something important: the bank account, recipient name, mailing address, payment link, due date, or method of payment. Even if every other detail looks right, one unexplained change is enough reason to pause.
7 warning signs of a fake contractor invoice email
An unexpected payment link, button, or QR code
A message may claim that the contractor has adopted a new payment portal and ask you to click immediately. Do not assume the destination is legitimate because the email carries familiar branding. Open the contractor’s known website yourself or call the office before using a link supplied in an unexpected message.
The payee or account information suddenly changed
New bank details, a different check recipient, a personal payment account, or a new mailing address should always be verified independently. Do not reply to the same message to ask if the change is real. If the mailbox is compromised, the criminal can answer that reply.
The message creates urgency or asks for secrecy
Pressure is a common scam signal. The email may say a crew cannot continue, a discount expires today, a manager is unavailable, or the payment must be completed before anyone else is contacted. The Federal Trade Commission lists pressure to act immediately as one of the major signs of a scam.
The sender address is almost right
Look beyond the display name. A fake address may swap two letters, add a word, use a free mailbox, or place a different address in the Reply-To field. Mobile email apps often hide the full sender address, so tap or expand the sender details before trusting it.
The invoice does not match the contract or project milestone
Compare the amount, job address, approved change orders, deposit schedule, work completed, and recipient name with your signed documents. A real project detail can be copied. The payment schedule and destination still need to match what you previously approved.
The payment method is unusual for the contractor
Be skeptical of demands for cryptocurrency, gift cards, wire transfers, payment apps, or transfers to an individual when that method was never part of the agreement. The FTC warns that scammers often insist on a specific method because it is difficult to reverse.
The sender discourages a phone call
A legitimate office should understand why you want to verify a changed or unexpected request. Refusal, evasion, or pressure to keep the conversation inside email is a strong reason not to pay.
Why replying to the email is not verification
When a message feels suspicious, replying with “Is this really you?” may seem like a sensible check. It is not independent verification. If a criminal controls the sender’s mailbox, the Reply-To address, or a convincing lookalike account, the same person who sent the fake invoice can answer your question and keep the conversation moving.
The same rule applies to phone numbers and website links inside the new message. A scammer can place a false office number in an email signature, attachment, or payment page. Start from information you already trusted before the message arrived: your signed agreement, an earlier verified invoice, the contractor’s established website opened separately, or a contact saved during the original project setup.
If a project manager calls about a payment change, you can still pause and call the main office yourself. A legitimate contractor will not object to a customer protecting both sides of the transaction.
Stop, Verify, Call
Use this three-step routine whenever a contractor payment request feels new, changed, or unexpected.
1. Stop
Do not click the link, scan the code, reply, download a new attachment, or send money while you are still evaluating the message.
2. Verify
Compare the request with your signed contract, previously approved invoice, job milestone, and known payment method. Check the complete sender address, but do not treat that check as final proof.
3. Call
Call the contractor using the phone number on your signed agreement, a prior verified invoice, or the company’s website that you opened yourself. Do not use a new number printed only inside the suspicious email.
Widespread Solutions payment verification process
Instructions checked July 15, 2026
Widespread Solutions may send invoices by email, but its January 2026 customer alert says the company does not ask customers to click a link in an email to make a payment. If an email contains new payment instructions, a payment button, a changed recipient, or a changed mailing address, call the office before taking action.
Known office number: (804) 317-9392
Payment options and invoice details can change over time. Use the instructions on your approved agreement or invoice only after the office confirms them through the known number above. Customers who want to discuss a credit-card payment should call the office directly.
This process matters even when the email appears to come from a real employee. Independent verification protects you and the contractor because it moves the decision outside the potentially compromised email conversation.
How to verify a contractor before the project begins
Invoice security starts before the first bill arrives. Keep a copy of the signed contract, payment schedule, company name, office number, project manager’s name, and expected invoice method in one place. Ask who is authorized to change payment instructions and how the company will confirm a legitimate change.
For work that requires a licensed Virginia contractor, use the Virginia Department of Professional and Occupational Regulation’s License Lookup to check the business or individual. The license lookup does not authenticate a specific email, but it helps you verify that the contractor identity and credential information match the company you intended to hire.
Use this pre-project checklist:
- Confirm the contractor’s legal business name and trusted office number.
- Save the signed contract and agreed payment schedule.
- Ask how invoices will arrive and which payment methods are accepted.
- Ask how legitimate changes to payment instructions will be confirmed.
- Keep prior verified invoices so you can compare sender, formatting, recipient, and account details.
- Treat any last-minute change as a new request that requires a separate phone call.
What to do if you already sent the payment
Act immediately. Contact your bank, card issuer, wire service, or payment provider and ask whether the transaction can be stopped, recalled, or disputed. Speed matters, especially with wires and transfers.
Preserve the evidence before deleting anything:
- Save the original email and full message headers.
- Save the invoice, attachments, payment instructions, and destination account information.
- Record the date, time, amount, confirmation number, and every phone number or address used.
- Take screenshots of messages, portals, or payment confirmations.
- Tell the real contractor so the company can protect other customers and inspect its systems.
You can report the incident to the FBI Internet Crime Complaint Center and the Federal Trade Commission. Henrico residents can also review the county’s fraud and scam prevention resources and contact local police when appropriate.
A five-minute check can protect the whole project
A fake invoice email succeeds when a familiar-looking message turns an ordinary payment into an urgent decision. You do not need to become an email investigator. You need a repeatable pause between the request and the payment.
Keep the Stop, Verify, Call checklist with your project records. Share it with anyone in your household or business who may approve contractor invoices. The few minutes required to make an independent phone call are small compared with the difficulty of recovering a fraudulent payment.
Not sure whether a Widespread payment request is real?
Do not use the contact information inside the message you are questioning. Call Widespread Solutions directly at (804) 317-9392. For project questions or a new estimate, use the established quote page.
