Create invoice

Security

Received an invoice from Invoxa? How to check it

Invoxa is invoicing software. Businesses and freelancers use it to send invoices, estimates and purchase orders to their own clients. So an email “from Invoxa” is really a document from the business named on it, sent with our tool.

Scammers have used the Invoxa name in phishing emails, both by imitating Invoxa and by opening Invoxa accounts to send fake invoices and payment requests. If you did not expect a bill, check it before you click or pay.

Quick check

  1. Do you know the business on the invoice, and did you buy something from it? If not, do not pay. A real Invoxa link only means the document was made in Invoxa, not that we checked who sent it.
  2. Where does the link go? Hover over the button or long-press it before you open it. Links to Invoxa documents always start with https://app.invoxa.com/ and end with /client, for example https://app.invoxa.com/invoices/…/client. Anything else, such as a similar-looking address or a shortened link, is not an Invoxa document.
  3. Who sent the email? Emails sent through Invoxa come from an address ending in @invoxa.com. The subject and message are written by the business that sent the document, not by Invoxa.
  4. What does it ask for? Invoxa never asks you for a password, a one-time code or card details by email. Card payments for Invoxa invoices happen on Stripe’s payment page (checkout.stripe.com), and only after you open the invoice.

What Invoxa never does

  • We never ask for your password, sign-in codes or card number by email, text or phone.
  • We never write the message in a document email. The business that sends the invoice writes the subject and text, so treat threats, fines or urgent demands in it as a warning sign, not as a message from Invoxa.
  • Invoxa itself only takes payment for its own subscription inside the web app (through Stripe) or through the App Store, never by gift card, crypto or wire transfer.

How to check the business on the invoice

  • Look up the business yourself, using a search engine or a contact you already have, not the phone number, email or link in the message.
  • Match the details to what you ordered: the amount, the date, the items, a purchase order or order number.
  • Call or email the business using those independent details and ask whether they sent the invoice.
  • Be suspicious of pressure. Short deadlines, threats and unusual payment methods are common signs of a scam. The FTC’s advice on recognizing phishing includes emails that “include an invoice you don’t recognize”.

If you think it is phishing

  1. Do not click the link, reply or pay. If you already entered card details, contact your bank or card issuer right away.
  2. Tell us. Forward the email, as an attachment if your email app allows it, to support@invoxa.com. Include the link from the message.
  3. Report it to the authorities and anti-phishing groups:
  4. Delete the email after you have reported it.

What Invoxa does about abuse

  • We suspend accounts used to send phishing or fraudulent invoices and remove their documents.
  • We limit how many emails an account can send, to make mass mailings through Invoxa harder.
  • We review every report sent to support@invoxa.com. The link in the email tells us which account sent it.

Invoxa’s official websites and app

If a website or app uses the Invoxa name but is not linked from www.invoxa.com, treat it as unofficial. Questions about a document you received? Write to support@invoxa.com. More answers are in our FAQ.