Home / All Courses / Email Scams and Invoice Fraud Awareness
Email Scams and Invoice Fraud Awareness

Payment redirection is the scam that empties Australian business bank accounts, and it arrives as an ordinary email about an ordinary invoice. This course covers how the fraud actually works, how an attacker gets inside a real email thread, the point in an accounts payable run where the money is lost, the impersonation scams that travel with it, the small number of controls that genuinely interrupt it and what to do in the first hour if a payment has already gone. Written for anyone with an inbox, not just the finance team.
What You Will Learn
- Explain how payment redirection fraud works and why it needs no malware to succeed
- Recognise the ways an attacker gets inside a genuine email conversation
- Identify the point in a payment process where the loss actually occurs
- Recognise executive impersonation, payroll diversion and fake supplier onboarding
- Apply verification on a channel the sender does not control
- Describe the first actions to take when a payment has already been made
Course Content
- Email scams and invoice fraud
- By the end of this course, you'll be able to:
- One number on an invoice is changed
- The scale, from the national figures
- Small business is the most affected, not the least
- This is a finance attack wearing an IT costume
- Three routes, and only one of them is your fault
- The lookalike address
- Thread hijacking, the convincing one
- The quiet part: mailbox rules
- Phishing is the doorway
- Multi factor authentication helps and is not a wall
- How the loss is built
- The reason they give is always boring
- Where the loss actually occurs
- The account name is the weak seam in the story
- Discovery is nearly always external
- Same idea, different costume
- Four you will meet
- Executive impersonation
- Payroll diversion
- Fake supplier onboarding
- The request that asks for no money at all
- A short list, and the first one carries most of the weight
- The callback rule, stated precisely
- Verification that works, and verification that feels like it does
- Make a change of bank details its own event
- The supplier records are the control point
- The cultural control, and it is not optional
- Speed matters more than certainty
- The order of the first calls
- What recovery depends on, honestly
- Assume more than one payment
- Where to report, in Australia
- Two things to raise with people who advise you
- Now put it together
- The invoice you were expecting
- The six things to carry away
Who This Course Is For
Everyone with a work email address, and in particular anyone who raises, approves or pays invoices, maintains supplier or payroll records or answers the phone to someone asking about an account.
Written by Kam Askari, Managing Director of Creative Directions Management Consulting Pty Ltd, ISO 9001, ISO 14001 and ISO 45001 Lead Auditor. MBA, Graduate Diploma in Occupational Health and Safety, MAICD. Checked against the sources listed below.
Sources and Legal References
This course is aligned to 4 official sources. Legal and regulatory references checked between 31 August 2026 and 4 October 2026.
Sources and Further Reading
This course draws on the following official sources. Always rely on the current version on the regulator’s website.
- Regulator guidanceNational Anti-Scam Centre, Targeting scams: report of the National Anti-Scam Centre on scams data and activity 2025As at 31/08/2026
- Regulator guidanceScamwatch, Report a scamAs at 31/08/2026
- Regulator guidanceScamwatch, Protect your small business from scamsAs at 31/08/2026
- Regulator guidanceIDCARE, National Identity and Cyber SupportAs at 04/10/2026
Always rely on the current version on the regulator’s website.
Seven day refund if you have not started
Or
For employers and teams
Buy Seats for Your Team
$39.00 per seat, inc GST
Total inc GST$195.00
Or
What You Get
Certificate of Completion
This is to certify that
has successfully completed
All learning modules and the final assessment
Kam Askari
Director, Creative Directions Management Consulting Pty Ltd
This is a certificate of completion of a non-accredited professional development course. It is not a nationally recognised qualification, a VET statement of attainment, a competency card, a licence, or evidence of competency. It is issued by Creative Directions Management Consulting Pty Ltd, which is not a Registered Training Organisation.
Sample layout. Certificate ID WP-SAMPLE-0001 verifies as Hazardous Manual Tasks and Manual Handling Safety.
- Certificate verified by its ID
- 100% online, self-paced
- Six months of access
Bought for yourself: six months of access from the day you pay. Team seat: six months from the day the worker activates their code.
Suggested Next Courses

Privacy and Data Protection (Australian Privacy Principles)
40 minutes
Online, self-paced

Records and Information Management Awareness
35 minutes
Online, self-paced
