Identifying Invoice Scams in Accounting
An employee in the accounting department receives an email containing a demand for payment for services performed by a vendor. However, the vendor is not in the vendor management database. Which of the following is this scenario an example of?
Community Votes
100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The scenario combines impersonation techniques with a specific financial motive, distinguishing it from general pretexting by focusing on the fraudulent invoice aspect.
This question tests the ability to distinguish between social engineering tactics and financial fraud schemes. It establishes that fraudulent payment requests from non-existent vendors are classified as invoice scams.
Pretexting is often chosen because attackers create fake scenarios; however, when the specific goal is a fraudulent invoice for non-existent services, 'Invoice scam' is the precise term.
Community Discussion (6 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
The correct answer is D, Invoice scam. An invoice scam involves sending fraudulent invoices or payment requests to victims, often impersonating legitimate vendors. Since the vendor is not in the database and the request is for payment for services never performed, this fits the definition of an invoice scam perfectly.Why the Other Options Are Wrong
Pretexting (A) is a broader social engineering technique where an attacker creates a fabricated scenario (pretext) to engage a victim. While an invoice scam uses pretexting, the specific act of demanding payment for fake services is best described as an invoice scam. Impersonation (B) is a component of the attack but does not describe the entire scheme. Ransomware (C) involves encrypting data and demanding payment, which is unrelated to this email scenario.Community Comment Notes
Community consensus strongly supports D. Comments highlight that while the situation feels like pretexting due to the deception, the key element is the fraudulent invoice requesting payment for non-existent services. One commenter noted that CompTIA specifically categorizes this under Section 1.1 as an invoice scam.Exam Strategy
When identifying threats, look for the specific outcome or mechanism described. If money is being stolen via fake bills or payment requests, think 'Invoice Scam' or 'Business Email Compromise' rather than just generic social engineering terms.
Frequently Asked Questions
Why isn't this considered Pretexting?
Pretexting is the broad method of creating a false scenario. The specific execution here—demanding payment for fake services—is an invoice scam.
How do I distinguish Invoice Scam from Ransomware?
Ransomware encrypts files and demands crypto. Invoice scams trick you into voluntarily paying a fake bill via wire or check.