EMAIL SECURITY FOR MANUFACTURERS, WHOLESALERS AND DISTRIBUTORSSupplier invoices,
paid to the real supplier.

A business that buys materials, stock or freight from a long list of suppliers pays large invoices every week, and most of the paperwork arrives by email. The National Crime Agency puts manufacturing beside construction as the sectors invoice fraud hits hardest.

A fictional email10:32
FromLisa Grantlisa.grant@thornfieldfreight.example
ToAlex Morgan
SubjectInvoice 30418 and updated remittance details
ChecksSPF pass, DKIM pass, DMARC pass

Morning Alex,

Please find below our invoice 30418 for last week's collections, £8,640.00 due on the 28th.

Please note we have recently changed our banking provider, so our bank details have changednote 1. Please update your records and make all payments from this invoice onwards to the account belownote 2.

Note 1: New bank details by email alone

Note 2: Every future payment moved at once

Account name: Thornfield Freight Ltd Sort code: 11-22-33 Account number: 12345678

Could you send me a remittance once it is paid? I am out on the road with the drivers all week, so email is bestnote 3.

Note 3: Steers you away from a phone call

Thanks, Lisa Credit Control, Thornfield Freight

53out of 100

High riskJatzo's result for this fictional email

What moved the score

  • Payment change with a warning sign+28
  • Supplier payment details changed+16
  • Personal information request+9
The numbered notes point out what to look for. The score and the reasons beside it are Jatzo's own result for this email, which was written for this page. Every name and address in it is invented.

Invoice and mandate fraud, as UK Finance recorded it.

  • £41.3 millionlost to invoice and mandate fraud in 2025
  • 2,305cases recorded in the year
  • 68%of the losses came from business accounts

Criminals intercept emails or take over an email account, then pose as a supplier, a solicitor or a builder with new bank details. UK Finance, Annual Fraud Report 2026, June 2026 (opens in a new tab)

Report Fraud's analysis for 2024/25 found construction and manufacturing were the two sectors most affected by invoice fraud. National Crime Agency and National Federation of Builders, March 2026 (opens in a new tab)

What manufacturers, wholesalers and distributors worry about.

And what Jatzo does about each, in the inbox your team already uses.

  1. A supplier's new bank details

    The government's Stop! Think Fraud campaign warns that fraudsters hack supplier email accounts, or register lookalike domains, to send fake invoices with new bank details.

    What Jatzo does

    The Invoice Fraud Checker compares the bank details on every invoice with the ones you confirmed for that supplier, and says Stop before you pay one that asks to pay somewhere new.

    Separate licence, from £129 a year
  2. A haulier or freight forwarder impersonated

    Carrier and freight invoices come from contacts you deal with every week, which is exactly why a new account on one gets paid without a second look.

    What Jatzo does

    The check flags a domain that looks like one you deal with but is not it, and a change of bank details with a warning sign beside it.

    Every plan
  3. Your own customers told to pay somewhere new

    If somebody can send email as your domain, or from one made to look like it, your customers can be sent your invoice with their bank details on it.

    What Jatzo does

    Domain Watch checks whether anybody could send email as your domains, and watches for new web addresses made to look like them.

    Business Pro

How it unfolds for manufacturers, wholesalers and distributors.

  1. Invoices every week

    Materials, stock and freight are paid for every week, and most invoices arrive by email.

  2. A mailbox is hacked

    Fraudsters hack a supplier's or haulier's email account, or register a domain that looks like it.

  3. Check it here

    New details arrive

    An invoice from a contact you deal with every week gives updated bank details.

  4. The invoice is paid

    Unless somebody rings the supplier on a number used before, the payment goes to the fraudster.

The gold mark is where Jatzo's check fits: somebody has the email open and nothing has been paid yet.

The check before you pay.

Six steps, every time. Print it, put it by whoever pays the invoices, and agree that nobody skips it because somebody senior is in a hurry.

Download the one-page checklist (PDF)
  1. Never change a supplier's, haulier's or customer's bank details because of an email or letter alone.

  2. Ring them on a number you have used before, not one on the invoice or in the email.

  3. Match every invoice to a purchase order and a delivery before it is approved for payment.

  4. A second person, not the one who received the request, approves the change.

  5. For a first payment to new details, send a small amount and have the supplier confirm receipt by phone.

  6. If money has gone, ring your bank's fraud line at once, then report to Report Fraud on 0300 123 2040 or reportfraud.police.uk (Police Scotland on 101 in Scotland).

What the business gets.

It does not replace the call. It makes sure somebody makes it. Jatzo adds a check beside the message in Outlook and Gmail, at the moment somebody decides whether to pay, reply or click, and your existing email protection stays as it is.

  • Each supplier invoice, checked before payment

    Separate licence, from £129 a year

    Invoice Fraud Checker, a separate Windows program, compares the bank details on every supplier and haulier invoice with the ones you confirmed, and says Stop when they differ. About the Invoice Fraud Checker

  • Check the email that changes details

    Every plan

    Anybody in accounts unsure about a supplier's or haulier's new bank details presses Check in Outlook or Gmail and sees a score out of 100 with the reasons.

  • Your finance lead hears at once

    Business and Business Pro

    When anybody checks a message scoring High risk or above, an email goes to addresses you choose at your own domain, such as your finance lead's.

  • See what is aimed at the business

    Business and Business Pro

    The organisation threat report counts the checks that reached Suspicious or above by kind of attack, the last 30 days against the 30 before, and names nobody.

  • Training for office and warehouse alike

    Business Pro

    Business Pro includes every Training Centre course for everyone in the team, Invoice and payment fraud among them, with a record of who completed it.

  • Addresses made to look like yours

    Business Pro

    Domain Watch, on Business Pro, looks for new web addresses registered to look like your company's, which could be used to send your customers fake invoices.

Which plan fits: an example

For manufacturers, wholesalers and distributors with 20 people, we suggest Business Pro: £240 a month, or £2,400 a year paid annually.

That is £12 a person a month.

Training for everyone who handles orders and invoices, and Domain Watch for addresses that copy yours, are both on Business Pro.

Business Pro includes the threat report, so you know what is being aimed at the business and whether it is getting worse: every email your team checked that came back Suspicious or above, by kind of attack, the last 30 days against the 30 before, naming nobody. At the start of each month a report goes by email to the addresses you choose, saying what was checked and what is still waiting.

  • The Check button in Outlook, including on a phone, and in Gmail, for everybody in the team.
  • Staff do nothing. Whoever looks after your email adds it once, for everybody.
  • Nothing to replace. Your email, and the protection it already has, stay as they are.
  • Jatzo keeps the score and the findings for up to 90 days, never the email or its attachments.
  • Pay monthly, or a year in advance for ten months' price.

The Invoice Fraud Checker is a separate licence, from £129 a year. About the Invoice Fraud Checker

What your sector's own bodies say.

Each point is linked to where it was published, with its date.

Check for changes to invoice or bank details, be wary of pressure to pay urgently, and verify by calling the genuine supplier on a number you have used before. Never transfer money until you are satisfied the details are correct.

National Crime Agency, invoice fraud campaign, March 2026 (opens in a new tab)

It is rare for a business to change bank accounts, so treat any request to do so with caution, confirm the old and new details on a known phone number, and consider waiting 14 or 30 days before new supplier details are approved.

GOV.UK, Stop! Think Fraud: Protect your business, current guidance (opens in a new tab)

Report Fraud replaced Action Fraud in December 2025. The number, 0300 123 2040, did not change. GOV.UK, Report Fraud: new service from City of London Police, December 2025 (opens in a new tab)

Questions manufacturers, wholesalers and distributors ask.

Does Jatzo check the bank details on an invoice?

The Check button looks for warning signs in the email, such as a request to pay a new account, but does not know which bank details are right for each supplier. Invoice Fraud Checker, a separate Windows program, compares each invoice with the details you confirmed.

Does it replace ringing the supplier?

No. Ring the supplier on a number you have used before, and confirm both the old and the new details, as the government's Stop! Think Fraud campaign advises. Jatzo helps whoever reads the email notice that it needs that call.

Who needs a seat?

Each person who checks email in the team, usually purchasing, accounts and whoever approves payments. Business Pro starts at five seats, and more can be added later.

Will our IT company need to do anything?

A little, once. Whoever looks after your email proves your domain with one DNS record. For Microsoft 365 they then upload one file in the admin centre, which needs the Exchange Administrator or Global Administrator role, and Microsoft takes 24 to 72 hours to add the button. For Google Workspace they install Jatzo for the domain. Staff do nothing.