Got a final statement by email — real or phishing?
DIRECT ANSWER
Real final statements arrive by email too. But phishers exploit that exact expectation. 5 verification points prevent damage.
Reviewed by FFCheck-redactie · Last reviewed 2026-05-28
Phishing around final statements spikes around moves and switching moments — exactly when you expect a statement. Five checks:
- Sender domainexact "supplier.nl" or subdomain, no "supplier-payment.com" or "invoice-supplier.nl"
- Greetingyour name (real) vs "Dear customer" (suspicious)
- Amount plausible? Compare with your expectation on move/switchunexpectedly high or low is a red flag
- Payment request with IBANcompare with IBAN on previous invoices; new IBAN with urgency = phishing
- NEVER click "pay now" linkslog into the official portal or call customer service. When in doubt: forward to customer service for verification, report to Fraudehelpdesk.nl. If paid: immediately call your bank for chargeback.