crackthe.net
Fake invoices and bogus collection notices
A past-due notice for $89 from a service you never signed up for – with a deadline, a threat of collections and a payment link. Here is how to settle it in three minutes.
Fake invoices work because they hook into an honest worry: did I forget to pay something? That reflex is what produces the quick payment or the click on the attachment. Yet you can settle whether a bill is genuine in a few minutes – without ever contacting the sender.
The short version
- Never pay or verify through the link in the message.
- Look in your own account with that company – every real invoice is there.
- Do not open attachments, especially not ZIP or Office files.
- A correct name and address prove nothing – they usually come from a breach.
- Real legal action arrives by mail, with a case number and a court, never as an email demanding payment in 48 hours.
What a fake invoice looks like
Dear customer,
Your subscription has an outstanding balance of $89.90. Despite several reminders, no payment has been received. If payment is not made within 48 hours we will pass the matter to our collections agency.
The full breakdown is in the attached file (Invoice_89419.zip).
Pay online now → http://payment-billing-portal.top/pay
Sincerely,
Your Billing Department
- A sender with no connection to any company: an invented catch-all domain like
invoice-service-24.net. A real provider emails from its own domain. - No name, no account number: "Dear customer" - a real invoice names you and references an order number you can look up.
- Deadline and threat: collections within 48 hours. Real payment terms are longer, and no one escalates that fast over $89.90.
- The attachment is the actual attack: an invoice as a ZIP archive is malware, not paperwork. A real invoice is a plain PDF, or it sits in your account.
- Payment link instead of your account: a domain that has nothing to do with the sender. Real providers point you to your own account, never to an external payment page.
The usual variants
| The supposed sender | Amount | The core trick |
|---|---|---|
| Streaming or subscription service | $30–90 | Payment link to a copied page |
| Collections agency | $100–500 | Threats about your credit and a lawyer |
| Phone or utility company | varies | Login details for your account |
| Online store, marketplace | small | Attachment carrying malware |
| A government agency or the IRS | high | Fear plus a tight deadline |
| Business directory listing | $300–900 | Targets small businesses, often by mail |
How to verify in three minutes
- Look in your account with the company that supposedly billed you – through their app or an address you typed yourself. If there is no open invoice there, you are done.
- Check your statements: do you even have a relationship with this company?
- Search the company name and the account details. With a running scam you usually find warnings from other people within minutes.
- If you are genuinely unsure: call the company on the number from your contract – never a number from the notice.
The rule that settles it
Every genuine bill can be traced in your own account or on your own statement. If it is not there, you owe neither payment nor a reply. The sender is not the source of truth – your own records are.If you already paid
- Call your bank right away and ask whether the payment can still be recovered: Sent money to a scammer .
- If you paid by card, dispute the charge with your issuer: Credit card misused .
- Report it at ReportFraud.ftc.gov and save every message as evidence.
If you opened the attachment
Disconnect the computer from the network and work through Ransomware: PC encrypted or Clicked a phishing link . Pay no ransom under any circumstances before you have tested your backup .
Your rights against a real collector
If the debt is real, or you cannot tell, you are not powerless. Under the Fair Debt Collection Practices Act you can request written validation within 30 days, and the collector must stop collecting until they provide it. They also may not threaten action they cannot legally take. A demand for payment in 48 hours, by wire or in gift cards, is not a collector – it is a scammer.
More scams are in the scams overview , and the groundwork is in How to spot phishing .
Frequently asked questions
Do I have to respond to a fake collection notice?
No. You do not owe a reply to an invented debt, and replying only confirms your address is live. A real collector, though, must give you written validation of the debt if you ask within 30 days – and that request is worth sending if you are unsure.
How do I recognize a dangerous attachment?
By the file type, and by it wanting to be unlocked when you open it. An invoice as a ZIP archive, as an Office file with a macro warning, or with a double file extension is almost always malware. A real invoice is usually a plain PDF – or it sits in your account.
The notice has my real name and address. Does that make it genuine?
No. Correct personal details usually come from data breaches and are standard in well-made fakes today. They are not proof of anything except that the sender knows more about you.