What to do if…
a landlord or supplier suddenly sends new bank details for where to pay
Short answer
Stop and treat it as a potential payment-diversion scam. Don’t pay the “new” bank details until you verify them using contact information you already trust. If you already sent money, contact your bank immediately and request a recall/reversal.
Do not do these things
- Don’t call the phone number, click the link, or reply to the message that provided the “new” details.
- Don’t change autopay/online bill pay/ACH instructions because the email “looks right”.
- Don’t share login codes, MFA numbers, or “verification” codes with anyone.
- Don’t send photos/screenshots of checks, banking screens, or ID to someone who contacted you first (only share sensitive info if you initiated contact through a trusted channel).
- Don’t let “late fees”, “eviction notice”, “final warning”, or “today only” pressure you into rushing.
- Don’t send payments via crypto, gift cards, or a third-party “agent”.
What to do now
-
Pause the payment and save evidence.
Screenshot the message and keep the original email/text. Avoid links and attachments. -
Verify through a trusted channel you choose (not theirs).
Use contact info from your signed lease/contract, a prior legitimate invoice, a known property management portal, or an official website you already know. Ask them to confirm:- whether they truly changed bank details
- exactly what the new details are
- when/why it changed
If you can’t reach a trusted contact, treat the change as unverified.
-
If payment is due soon, avoid late trouble without paying the wrong place.
Pick the safest option that matches your existing agreement:- Pay using the previous, known-good method you’ve used before (only if you’re confident it’s legitimate).
- Use an already-established method in your lease/contract (for example, the official payment portal you already use, or mailing to the address specified).
- If you can’t safely pay yet, set the money aside and document your attempts to verify; request a short grace period via a trusted contact route.
-
If you already sent money, call your bank’s fraud department immediately.
Use the number on your card/app/statement. Tell them you suspect fraud and ask for the right action based on how you paid:- Wire: request a wire recall and ask them to contact the receiving bank.
- ACH / online transfer: ask about return/reversal options and stopping any pending transfers.
- P2P apps (if you used one): contact the app’s support and your bank immediately.
Recovery attempts are time-sensitive and not guaranteed, so move fast and follow the bank’s instructions.
-
Report it to federal reporting channels (helps investigation and may support recovery).
- File a report with the FBI’s Internet Crime Complaint Center (IC3).
- File a report with the FTC’s fraud reporting site.
Keep any confirmation numbers if you receive them.
-
Ask your bank what else they need from you.
Some banks may request specific indemnification paperwork or a detailed timeline. Provide only what your bank asks for, using trusted contact channels you initiate. -
If your bank isn’t responding appropriately, consider escalating (can usually wait unless the bank requests it).
If you’re dealing with a national bank, you can file a complaint with the Office of the Comptroller of the Currency (OCC) as an additional escalation route. -
Expect “recovery” scammers.
After scams, it’s common to get follow-ups offering to recover funds for a fee or asking for more bank info. Don’t engage.
What can wait
- You don’t need to decide right now whether this was a hacked email, an impersonation, or an internal mistake—verification and stopping the payment comes first.
- You don’t need to renegotiate contracts or change all your payments today.
- You don’t need to confront the sender; keep communications factual and focused on confirming legitimate payment instructions.
Important reassurance
Pausing to verify is the correct move—this scam pattern is common, and urgency is part of how it works. If you already paid, quick action with your bank is the best chance to limit losses.
Scope note
This guide covers the first steps to prevent a wrong payment and trigger the fastest recovery paths. If money has moved, your bank’s fraud team may guide you through additional steps specific to the transfer type.
Important note
This guide is general information, not legal or financial advice. What’s possible depends on how you paid (wire vs ACH vs card/portal/P2P), how quickly you reported it, and your bank’s procedures—follow your bank’s instructions if they differ.
Additional Resources
- https://www.helpwithmybank.gov/help-topics/fraud-scams/scams/wire-transfer-scams/wire-transfer-scams-fraudulent.html
- https://www.ic3.gov/CrimeInfo/BEC
- https://www.fbi.gov/how-we-can-help-you/scams-and-safety/common-frauds-and-scams/business-email-compromise
- https://reportfraud.ftc.gov/
- https://www.justice.gov/archives/opa/pr/united-states-files-forfeiture-action-recover-over-5m-funds-traceable-business-email