What payment redirect emails are and why you're getting them
A payment redirect email is a message that tells you to send money somewhere other than the original payee — usually to a new account, address, or payment method. These emails often claim your creditor, employer, or service provider has changed how they want to be paid. They look like they come from a legitimate company but actually route your money to a scammer's account.
You're getting them because scammers monitor public records, intercept emails, or buy stolen contact lists. They know when you have an account with a bank, utility, or loan servicer and send a fake notification before the real one arrives. If you pay based on the redirect, your money goes to the scammer and recovery is difficult.
The most common targets are people with mortgages, auto loans, property taxes, and utility bills — accounts where regular payments are expected and large amounts change hands.
Key Takeaways
- Never follow payment instructions in an email, even if it looks official — call the company directly using a phone number from your bill or their website instead.
- Legitimate companies almost never ask you to change payment methods by email; they send notices through your online account portal or by mail.
- Report redirect emails to the company's fraud department and to the Federal Trade Commission at reportfraud.ftc.gov so they can warn other customers.
- If you already sent money to a redirect, contact your bank or payment service within 24 hours to reverse the transaction before the scammer withdraws it.
- Set up payment reminders in your own calendar so you initiate payments on your schedule, not when an email tells you to.
How to verify a payment redirect before you act on it
The safest step is to ignore the email entirely and contact the company yourself. Find the phone number on your most recent bill, your account statement, or the company's official website — not from a link in the email. Call and ask whether they sent the redirect notice. A real company will confirm or deny it in seconds.
If the company confirms they did send a redirect, ask them to email you a new instruction from your account portal or to mail you a letter. Legitimate companies can do this. If they say "just follow the email," that is a red flag.
Check your online account portal directly. Log in through the company's website (not a link in the email) and look for a payment methods section or recent notices. Real payment changes appear there first, before they reach your inbox.
Watch the email address carefully. Scammers use addresses that look almost right — like "paymentupdate@companyname-secure.com" instead of the real domain. Hover over the sender name to see the full email address. If it does not match the company's official domain, it is fake.
What to do if you already paid a redirect
Contact your bank or payment service immediately — within 24 hours if possible. If you sent money by wire transfer, ACH, or debit card, tell them the transaction was unauthorized and ask them to reverse it or recall the payment. Banks can sometimes stop a transfer before it clears, especially if you call the same day.
Provide your bank with the redirect email and the account details you sent money to. The bank will file a fraud claim and may recover the funds if the scammer has not already withdrawn them. This process usually takes 10 to 30 days.
If you paid by check, contact the company that received it and ask them to return it. If the check has already cleared, your bank can still investigate, but recovery is less likely.
Report the fraud to the Federal Trade Commission at reportfraud.ftc.gov. Include the redirect email, the amount sent, and the account it was sent to. The FTC shares this information with law enforcement and uses it to identify patterns of scam activity.
How to report redirect emails to the company and authorities
Forward the redirect email to the company's fraud or security department. Most companies have a fraud email address listed on their website or in the footer of legitimate emails. Include a note saying you received this email and want to report it as a phishing attempt.
Report it to the Federal Trade Commission at reportfraud.ftc.gov. You can also report it to the Internet Crime Complaint Center (IC3) at ic3.gov if the scam involved a wire transfer or significant amount of money.
If the redirect email impersonated a bank, credit union, or financial institution, report it to the Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov/complaint. The CFPB tracks these complaints and can take action against institutions that fail to protect customers.
Report the email to your email provider. Most email services have a "Report Phishing" or "Report Spam" button. This helps the provider block similar emails from reaching other users.
Setting up payment reminders so you control when you pay
Create a calendar reminder for each regular payment — your mortgage, auto loan, utilities, taxes, or credit cards. Set it for a few days before the due date so you have time to initiate the payment yourself. This way you are not waiting for an email to tell you when to pay.
Use your company's online portal or app to set up automatic payments directly from your bank account. You control the amount, the date, and the account it comes from. Once it is set up, you do not have to respond to emails or remember to pay manually.
If you do receive a payment redirect email, you will already know it is fake because you have your own payment schedule. You can report it immediately without second-guessing whether it might be real.
Red flags that an email is a redirect scam
The email asks you to pay to a new account or address without explanation. Real companies give you advance notice through your account portal or by mail, and they explain why the change is happening.
The email creates urgency — "pay immediately," "your account will be closed," "late fees apply." Scammers use pressure to stop you from verifying the request. Real companies give you time to update your payment method.
The email includes a link to "confirm your account" or "update your payment method." Legitimate companies do not ask you to click links in emails to handle financial changes. They direct you to log into your account through the official website.
The email is poorly written or has spelling errors. Many scam emails are sent from outside the country and translated poorly. Real company emails are proofread.
The email asks for your password, PIN, or Social Security number. No legitimate company asks for this information by email.
Protecting your email and account from future redirects
Use a strong, unique password for each financial account. If a scammer gets into your email, they can request password resets for your bank and loan accounts. A strong password makes this harder.
Enable two-factor authentication on your email and financial accounts. This means even if a scammer has your password, they cannot log in without a code sent to your phone or generated by an app.
Do not use the same email address for every account. If one email is compromised, scammers can target all your accounts at once. Use different email addresses for banking, utilities, and shopping when possible.
Check your account settings regularly. Look for linked email addresses, phone numbers, or recovery contacts that you did not add. Scammers sometimes add these to lock you out of your own account.
Frequently Asked Questions
Can a redirect email be real if it comes from the company's official email address?
Possibly, but still verify by calling the company directly. Scammers can spoof email addresses to make them look official. A phone call to the company's main number is the only way to be certain. If the company confirms they sent it, ask them to resend the instruction through your account portal.
What if I already set up automatic payments and then get a redirect email?
Do not change your automatic payment. The redirect is fake. Report it to the company and the FTC. Your automatic payment will continue to the correct account, and you do not need to do anything.
Can I get my money back if I sent it to a redirect account?
Maybe, but only if you act fast. Contact your bank within 24 hours and report it as fraud. If the money has not been withdrawn yet, your bank may be able to reverse it. If it has been withdrawn, recovery depends on whether law enforcement can trace the account and recover funds — this is rare but possible.
Do I need to change my password after receiving a redirect email?
Only if you clicked a link in the email or entered your password on a fake website. If you just read the email and deleted it, your password is safe. If you are unsure, change it anyway — use a strong, unique password that you have not used before.
What should I do if my employer sends a redirect email about my paycheck?
Call your HR or payroll department directly using the main company phone number. Do not use a number in the email. Scammers often target employees by impersonating payroll. Verify before you change your direct deposit information.