How to Check Suspicious Proof-of-Payment Messages

A message that appears to show a completed payment can create pressure to act quickly. Before sharing information, changing an account setting, or treating a transaction as complete, readers can use a simple evidence checklist. The aim is not to assume that a message is genuine or fraudulent, but to separate what can be confirmed from what is merely claimed.

Start with the original record

Do not rely on a cropped image, forwarded message, or isolated attachment as the only evidence. Keep the original communication and note where it came from, when it arrived, and what action it requests. Readers can compare the displayed details with the transaction history in the relevant account or financial service, using a trusted route rather than a link supplied in the message.

Check the details carefully

Look for inconsistencies in:

• The recipient name, reference, amount, or transaction description.
• Spelling, formatting, logos, contact details, and file properties.
• The sender address, telephone number, or account handle.
• Requests to send money back, pay an extra charge, disclose a password, or share a verification code.
• Pressure to act before the information can be independently checked.

A document can look professional without proving that a transaction exists. Readers should treat visible branding, stamps, reference numbers, and screenshots as information to review, not as confirmation by themselves.

Verify through a trusted channel

Open the relevant service independently, or use contact details already stored from a reliable source. Avoid using buttons, telephone numbers, or addresses supplied only in the suspicious message. Ask what can be confirmed from the official transaction record, and keep a written note of the response. Do not disclose passwords, one-time codes, full card details, or identity information merely to validate an unfamiliar request.

For additional guidance on warning signs and record-keeping, readers can consult this proof-of-payment safety checklist.

Preserve evidence and pause

Save the message, attachment, headers where available, and relevant account records without editing them. Do not delete the conversation until it is no longer needed for a report or dispute. If an action has already been taken, readers can contact the relevant service through an independently sourced channel and ask what protective steps are available.

A careful pause is useful when the evidence is incomplete. Compare records, verify the request separately, and proceed only when the transaction and next step are clear.