Invoice fraud is simple: a genuine invoice is intercepted and its bank account replaced, or a fake invoice imitates that of a regular supplier. The Belgian FPS Economy received more than 200 reports of this kind in 2024, for total losses of 3.3 million euros. Yet the invoice itself contains almost everything needed to check it: the supplier's identity, its numbers, its registered office, its account. What remains is to compare these details with the public records — free of charge — and with what you already know about the supplier.
Step by step: where to look, what to read
Mandatory details: what the invoice must show
Three texts complement each other. For VAT (Royal Decree no. 1 of 29 December 1992, art. 5): the date and a sequential number; the name, address and VAT number of the supplier; the same details for you, the customer; the description and quantity of the goods or services; the date of the transaction if it differs from the invoice date; the taxable amount, the rate and the amount of VAT. The Code of Economic Law (art. III.25) requires the enterprise number and at least one payment account of the supplier. The Code of Companies and Associations (art. 2:20) adds, for a company: the name, the legal form (for example BV/SRL, the private limited company, or NV/SA, the public limited company), the exact address of the registered office, the mention "RPM" or "RPR" (register of legal entities) followed by the competent court and, where applicable, the fact that it is in liquidation.
A missing detail is not proof of fraud — many invoices are simply badly made. But an invoice without an enterprise number or legal form leaves you nothing to check: ask for a correct one before paying.
Does the enterprise number exist, and is the company active?
The enterprise number (ten digits, for example 0123.456.789) is the Belgian counterpart of a Companies House, KvK or SIREN number. It can be searched in the CBE register (interface in English, French, Dutch and German). Three questions:
- Is the name the one on the invoice? A trade name or a logo is not enough: the invoice must come from the registered entity, with its legal form.
- Is its status "active"? A company that has been struck off, is in liquidation or bankrupt and keeps invoicing as if nothing had happened deserves a phone call.
- Does its activity match what it invoices you? Registered activities (NACE codes) are not exhaustive, but a large gap is a question to ask.
Is the VAT number valid?
For a Belgian business, the VAT number is "BE" followed by the enterprise number. The VIES service shows whether it is valid on the day of the check, and often displays the registered name and address. A VAT number that does not match the enterprise number on the same invoice is an inconsistency to clear up.
Is the address on the invoice the registered office?
A company's invoice must show its registered office. Compare it with the one in the register. A difference may have a simple explanation — a recent transfer of the registered office, or the address of a branch, both visible in the register. It may also point to an invoice built from old information. A registered office transfer followed by a change of manager, all within a few weeks, deserves a careful read.
Does the company file its accounts?
A company that exists on paper but has never filed accounts, or not for years, can still invoice — but it is one more reason to check the rest. For a supplier to whom you entrust large amounts or deposits, read its accounts too: cash, debts due within one year, overdue social security debts. The guide Checking a Belgian supplier before paying a deposit explains how.
Bank account change fraud: the signs, and the only right reflex
The pattern is always the same: a message announces a new bank account, or an invoice arrives with an account different from usual, often with a plausible reason (change of bank, audit, frozen account) and pressure on the deadline. The messages sometimes come from the supplier's real mailbox, when it has been hacked — or from yours.
Since 9 October 2025, banks in the euro area also check, for every euro transfer within the euro area, that the IBAN matches the payee name you entered, and warn you of any difference. A mismatch warning on a supplier invoice is to be read: it is often the last moment when the error — or the fraud — can still be avoided.
Peppol: what e-invoicing changes to the checks
Since 1 January 2026, VAT-registered businesses established in Belgium must exchange structured electronic invoices with each other, in principle through the Peppol network. Outside its scope, among others: invoices to consumers, VAT-exempt transactions (art. 44 of the VAT Code) and suppliers or customers not established in Belgium. A tolerance period on fines ran until 31 March 2026.
- For a foreign buyer, a Belgian supplier may still send a PDF: the obligation covers exchanges between businesses established in Belgium. The checks in this guide are then your main safeguard.
- A PDF by e-mail becomes the exception between Belgian VAT-registered businesses: if it comes from a supplier that used to send you Peppol invoices, that is a signal in itself.
- The sender is identified on the network by an identifier which, in Belgium, is based on its enterprise or VAT number. Check that it matches the supplier; a company's registration on the network can be looked up in the public Peppol Directory.
- Peppol does not check the IBAN. The account on a structured invoice is still entered by the sender: if its system or mailbox is compromised, the phone-call reflex stays the same.
Checking that a supplier or customer is on Peppol: its identifier is most often 0208 followed by its enterprise number. Look up a company's Peppol ID.
Before paying a Belgian supplier invoice
- Details present: enterprise number, VAT number, legal form, registered office, bank account.
- Enterprise number active in the register, under the same name.
- VAT number valid in VIES and consistent with the enterprise number.
- Address on the invoice = registered office in the register (or a recent transfer that explains it).
- Bank account identical to previous invoices — if not, call on a number you already had.
- Usual channel (Peppol, or the usual sender); the bank's payee name warning read, not ignored.
Sources
- Royal Decree no. 1 of 29 December 1992, art. 5 (details on a VAT invoice) — Justel.
- Code of Economic Law, art. III.25; Code of Companies and Associations, art. 2:20 — Justel.
- FPS Finance, e-invoicing in Belgium; who must e-invoice and end of the tolerance period (French).
- FPS Economy, payee name check linked to the IBAN (9 October 2025, French); reporting: ConsumerConnect.
- Febelfin, invoice fraud (French); Safeonweb (Centre for Cybersecurity Belgium), advice for businesses.