Billing Notice
The message presents an invoice, bill, order, charge, or subscription to review, pay, dispute, or cancel. Billing stories look routine and seem to need prompt attention, which makes them a common choice for attackers.
Also known as
- Aliases
-
- fake invoice
- invoice lure
- invoice scam
- Broader terms
-
- invoice fraud
Mapped to
MITRE ATT&CK®
Sub-themes
TH0015.1
Subscription Renewal Notice
The message says a paid subscription is renewing, expiring, or has failed to renew, often with a charge. Attackers use renewal notices to get people to click, call, or pay to cancel or keep the service.
TH0015.2
Unpaid Invoice Notice
The message says an invoice or bill is unpaid, overdue, or waiting to be settled. An overdue payment creates time pressure to pay or to open the invoice quickly.
TH0015.3
Order or Charge Notice
The message says an order was placed, canceled, or has a problem, or that a charge was made or failed. Attackers use unexpected orders and charges to get people to review or cancel them through the message.