Is this invoice or account email from Reckon a scam?
No. Reckon is a genuine Australian accounting software provider, and 'Reckon' in your inbox is far more likely to be a scammer wearing the name. Fraudsters send Reckon-branded emails chasing payments, logins and financial details, and the changed-bank-details invoice is the version that costs businesses most. The good news: a few quick checks almost always tell a real Reckon message from a fake.
Genuine Reckon links lead to reckon.com — but a link can be made to look real, so don't go by the link alone. Below is exactly what a real Reckon message looks like, the scams currently circulating in its name, the red flags that give a fake away, and a real example to compare against. Got a message in front of you? Check it now for an instant verdict.
What a real Reckon message looks like
Genuine messages from Reckon link to reckon.com. Treat a link to any other address as a warning sign.
- Genuine Reckon emails come from reckon.com addresses (for example, accountshosted@reckon.com) — but a sender address can be spoofed, so judge the message, not just the sender
- Before paying any invoice with new or changed bank details, verify the change by calling the supplier on a number you already have — not the contact details in the email
- Real invoices and account details can be checked by logging in to Reckon directly at reckon.com, rather than through a link in an email
- Reckon publishes scam guidance on its security pages, so you can check a suspicious email against known scams
What Reckon will never do
- Ask for your Reckon login, password or financial information in an email
- Require you to act through an emailed link or attachment; real invoices and account details can be checked by logging in at reckon.com directly
- Object to you verifying a payment before making it (no legitimate business minds you calling a supplier on a number you already have to confirm changed bank details)
- Pressure you to pay urgently or outside your normal process
Common Reckon scams
- Phishing emails impersonating Reckon that request payments, financial information, logins or passwords, or link to a fake Reckon login page
- Lookalike sender addresses and web addresses made to resemble reckon.com
- Reckon-branded emails carrying attachments or links that install malware or capture your details
- Scams timed to EOFY, when businesses are reconciling and paying a high volume of invoices in Reckon
Red flags to watch for
- An invoice or email asking you to send a payment to new or changed bank details
- A request for your Reckon login, password or financial information
- A sender address that isn't a reckon.com address — though a matching address doesn't prove it's genuine, since it can be spoofed
- Pressure to pay an invoice urgently or outside your normal process
- A link that, on hover, points to a domain that isn't reckon.com
Reckon scam examples
These composed examples show how scams impersonating Reckon typically read, with the tells that give each one away. Compare them against anything you've received.
Subject: Updated invoice: please note new payment details. Hi, please find our June invoice attached. Our banking has recently changed, so remit payment to the new account listed on the invoice before Friday to avoid any disruption to your service.
What gives it away:
- Changed bank details on an invoice is the classic business email compromise move; the invoice may be real but the account is the fraudster's
- The only safe response is to phone the supplier on a number you already have, never the contact details in the email itself
- Quiet deadline pressure ('before Friday') plus a plea to pay outside your normal process are exactly the red flags Reckon's own scam guidance warns about
An email about a 'billing problem' leads to a page that looks like Reckon's sign-in screen at reckon-secure-login[.]example, asking for your username, password and the answer to a security question 'to restore access'.
What gives it away:
- The address isn't reckon.com; lookalike web addresses made to resemble it are a known Reckon impersonation tactic
- A real billing issue is visible when you type reckon.com into your browser yourself and log in there
- Piling a security question on top of the password grab shows the page is harvesting everything it can, not restoring anything
Not sure about your message?
Paste the suspicious Reckon text or email and get an instant scam verdict, free.
How to verify a message from Reckon
- Don't pay, click, reply or open the attachment on the strength of the email alone
- Type reckon.com into your browser yourself and log in to check the invoice or account detail the message mentions
- For any change to a supplier's bank details, phone the supplier on a number you already have and confirm it in person
- Compare the message against the known scams on Reckon's email-scams security page (linked below)
If you have been scammed in Reckon's name
Clicked the link, paid, or shared details? Act now. The first hour matters more than anything else you do later.
- If you paid to fraudulent bank details, contact your bank immediately; ask it to try to stop or recover the payment, because the first hours matter most
- Change your Reckon password by going to reckon.com directly, and change it anywhere else you reused it
- If you opened an attachment, run a full security scan on the device before using it for banking or payroll again
- If business or identity details may be exposed, contact IDCARE (idcare.org) for free identity support
- Report the scam to Scamwatch and ReportCyber using the links below, and forward any scam SMS to 7226
Where to report a scam impersonating Reckon
Received — or fell for — a message impersonating Reckon? Report it. It helps authorities and carriers shut the campaign down for everyone who gets the next one.
- Reckon scam alerts — Reckon's own page on current scams and how to report one.
- Scamwatch — Report the scam to the ACCC's national scam service.
- ReportCyber — Report cybercrime and financial loss to the police.
- ACMA — Complain about scam texts and spam SMS, email or calls.
- Forward to 7226 (SCAM) — Forward the scam SMS to short code 7226 so carriers can block the source.
- IDCARE — Free identity and cyber support if your details were taken.
Latest Reckon scams in 2026
Reckon-flavoured scams in 2026 are quieter than the flashy bank texts, and that is what makes them effective. The typical shape is an ordinary-looking invoice email in a busy accounts inbox, either impersonating Reckon itself, chasing a login or 'billing' detail, or riding a compromised supplier thread with changed bank details attached. Activity concentrates around EOFY, when businesses reconcile and pay a high volume of invoices in Reckon and one more is unremarkable. Two habits beat all of it: log in at reckon.com yourself instead of using emailed links, and confirm any new bank details by phoning the supplier on a number you already hold.
Frequently asked questions
An invoice says the supplier's bank details have changed — should I pay it?
Stop and verify first. A common scam (business email compromise) is for a fraudster to access an email account and change the bank details on a genuine invoice. Before paying, phone the supplier on a number you already have — not the contact details in the email — to confirm the change is real.
How do I know if a Reckon email is genuine?
Genuine Reckon emails come from reckon.com addresses, but a sender address can be spoofed, so don't rely on it alone. Don't click links or act on changed payment details from an email; log in at reckon.com yourself and check Reckon's security pages if you're unsure.
What should I do if I paid a scammer or entered my Reckon login?
Contact your bank immediately to try to stop or recover the payment, and change your Reckon password by going to reckon.com directly. Report the scam to Scamwatch, and contact IDCARE if your business or identity details may be exposed.
What is Reckon's real website?
Reckon's only official website is reckon.com, and genuine emails come from reckon.com addresses such as accountshosted@reckon.com. Always reach it by typing reckon.com into your browser yourself rather than following an emailed link, because lookalike addresses made to resemble reckon.com are a known impersonation tactic.
How do I report a Reckon scam email?
Check it against the known scams on Reckon's email-scams security page, then report it to Scamwatch at scamwatch.gov.au so the National Anti-Scam Centre can track the campaign. If your business lost money, also report to ReportCyber at cyber.gov.au and contact your bank first. Scam texts can be forwarded to 7226 (spells SCAM).
Related scam types
Scams impersonating Reckon usually fit one of these patterns. Learn how each works:
Related brands
Other accounting names scammers impersonate — check a message from one:
Sources
- Email scams and how to spot them (Reckon)
- Business email compromise scams (Scamwatch (National Anti-Scam Centre))
- Email scams (Scamwatch (National Anti-Scam Centre))
This guide is general information, not legal or financial advice — always verify with Reckon through an official channel.