Invoicing fraud is widespread. You must follow this guidance to prevent it.
Invoicing fraud is where a fraudster intercepts an email to or from us and changes the bank details in transit and without the sender and recipient knowing. To prevent this, you should have/provide the relevant bank details in writing and you should then telephone the relevant person through a number you are sure is correct. You should avoid the number on the footer of an email or headed paper. If the fraudster has changed the account details, then the contact details may well be changed too. If telephoning a third party, then find their number from a trusted source such as their main website or, for firms of solicitors, The Law Society (see https://solicitors.lawsociety.org.uk/). You must telephone to reconfirm the bank details, checking them against the written version. This applies equally when you are providing our details to a client to provide on to a third party (e.g. a funder or investor). Then you should remind the client to tell the third party to call us to check our account details before sending any funds. This is essential for all client money movements and advised for all material office money movements, whether to or from the firm - you don't want your client paying your fees to a fraudster and not to you! We say to clients in our Terms of Engagement that we will not write to them requesting they send funds to us without first telephoning them. We also say that we require them to telephone you if they receive an unannounced request for funds. Extreme care is required when moving funds and you should be aware that fraudsters are sophisticated and effective at defrauding law firms and their clients. You must follow these guidelines to prevent an error. Being reckless as to confirming bank details and causing a loss will lead to you incurring personal liability.