ATO logo

Risk of invoice fraud

The assessment assumes your risk of invoice fraud is lower if the proportion of your EDI and Peppol invoices is higher.

Last updated 17 October 2025

PDF and paper invoices can easily be intercepted and manipulated before being received by the buyer. Business email compromise, or payment redirection scams, is an increasing issue affecting many Australian businesses.

According to the Australian Competition and Consumer CommissionExternal Link, in 2024 payment redirection scams cost Australian businesses $152.6 million, and were the most reported scam type by small and micro businesses.

Peppol eInvoicing is more secure than email as only accredited Peppol access point providers can exchange encrypted documents over the Peppol network. Access point providers accredited in Australia must meet security requirements based on ISO27001 or the Australian Signals Directorate Information Security Manual.

QC73067