Got an Email Saying Bank Details Have Changed? Check Before You Pay

Short answer: never pay a new account until you have confirmed it by phone. An email saying "our bank details have changed" is one of the most expensive scams in the world, for businesses and families alike.

How the scam works

The fraudsters either break into a real email account, or set up a lookalike address that is one letter different from the real one. Then they wait. When a payment is due, an email arrives that looks completely normal: the right names, the right logo, sometimes even a real invoice, and sometimes as a reply in a genuine email conversation. The only change is the bank account.

The message usually says the company has changed banks or that its account is being audited, and asks you to use the new details for this and future payments. Some add urgency, or ask you to keep it quiet because "the change is confidential".

What Abu Dhabi Police warned about

In October 2026, Abu Dhabi Police warned businesses about fake emails impersonating real suppliers and business partners. Police said fraudsters use genuine business correspondence to make requests to change bank details look legitimate, and that the scam is often only discovered after the payment has been made, which can cause significant losses.

It doesn't only target companies

The same trick hits families. Watch out for emails about a change of bank details for rent from a landlord or agent, school fees, a builder or contractor, a wedding or events supplier, or a deposit when buying a home. If the money is large and the email is the only thing telling you to pay somewhere new, stop and check.

Warning signs

1. An email changes where you should send money. This alone is reason enough to call and check.
2. The sender's address is slightly off, such as an extra letter, a swapped letter, or a different ending, or replies go to a different address.
3. There is pressure to pay quickly, or to keep the change confidential.
4. They can't talk on the phone and want everything done by email.
5. The new account is in a different name, bank, or country from before.

What to do before you pay

1. Call to confirm. Use a phone number you already have, or one from the company's official website. Never use the number in the email, because it may belong to the fraudsters.
2. Read the new account details back to them and confirm they match exactly.
3. For businesses: follow the police advice. Never change payment details based on an email alone, have a second person approve any change, and make sure everyone who handles payments knows about this scam.

If you already paid

1. Call your bank immediately. Tell them it was fraud and ask them to try to stop or recall the payment. Every hour counts.
2. Report it to the police. In the UAE, contact Abu Dhabi Police's Aman service on 8002626, by SMS to 2828, or by email to aman@adpolice.gov.ae. In the US, report it at ic3.gov. Elsewhere, contact your country's fraud reporting service.
3. Tell the real supplier or person, using a number you trust. Their email account may have been hacked, and they need to know.
4. Secure your own email. Change your password and turn on two-step verification, in case your account was the one that was watched.

The rule is simple: a new bank account in an email is never confirmed until you have heard it from a real person, on a number you already trust.

Sources: Gulf News: Abu Dhabi Police warns businesses of email payment scam · Barracuda: Why cybercrime losses hit $21 billion in 2025 (FBI IC3 report)