social media Scam
LinkedIn BEC Invoice DM Scam
Scammers DM finance staff with fake invoices or payment links, hoping the message bypasses email security. WebVetted examines the sender’s history, attachments, and linked domains to uncover the fraud.
Red flags
- Message references an invoice number you cannot match in ERP.
- Sender refuses to move the discussion into corporate email.
- Payment link routes to shortened URLs or crypto addresses.
How to Respond
- Check the sender with the LinkedIn Checker to confirm tenure and references.
- Verify invoices via your finance system and call vendors using known numbers.
- Submit suspicious DMs to LinkedIn and forward evidence to your SOC.
📌 Case study
One attacker impersonated a supplier CFO and demanded expedited payments through Wise. Another DM dropped a poisoned SharePoint link that requested Microsoft logins before showing the “invoice.”
Related tools
social media Scam
LinkedIn Founder Impostor Scam
Attackers clone executive profiles, then message staff about urgent payments or data requests. WebVetted tracks employment history, endorsements, and shared connections to confirm whether the “founder” is real.
Red flags
- Profile created recently with only a handful of connections.
- Work history misses obvious milestones or lists overlapping timelines.
- Messages request W-2s, payroll updates, or gift card runs on first contact.
How to Respond
- Paste the profile into the LinkedIn Checker to compare employment signals and mutual connections.
- Call the company’s main line or Slack the real executive before following any instructions.
- Report the impostor to LinkedIn and warn your security team with the WebVetted report.
📌 Case study
We traced a cluster of fake fintech founders who asked accounting teams to send international wires. Another impersonator stole a biotech CEO’s bio and used it to phish job applicants for passports.
Need evidence for a bank or police report?
Generate a full entity dossier plus user-submitted reviews and then share the PDF with law enforcement or platform trust teams.