INV-2025-TIFKN-
Medium Risk2 flags detected including: suspicious_email_domain
Limited vendor history available
1 high, 0 medium, 1 low
The contact email uses a typosquatted domain ('go0gle.com' instead of 'google.com'), replacing the letter 'o' with the number '0'. This is a strong indicator of a phishing or fraudulent attempt, especially when claiming to represent a major company like Google Ads Services.
Recommendation: Reject the invoice immediately. Do not contact the provided email or phone number. Verify the vendor's legitimacy through official channels.
Vendor not found in approved vendor list
This vendor has no prior transaction history in the system.
Recommendation: Follow new vendor onboarding procedures before payment.
{
"isAnomaly": false
}{
"hasChange": false
}{
"isDuplicate": false
}{
"checked": false
}{
"isConsistent": true
}{
"detected": false,
"keywords": []
}{
"isKnown": false
}Header
{
"contractReference": null,
"dueDate": null,
"invoiceDate": null,
"invoiceNumber": null,
"poNumber": null
}Vendor
{
"contactEmail": "[email protected]",
"contactPhone": "888-921-1000",
"remittanceAddress": null,
"remittanceName": null,
"taxId": null,
"vendorAddress": null,
"vendorName": "Google Ads Services"
}Payment
{
"accountNumberLast4": null,
"bankName": null,
"changeInstructions": [],
"paymentEmail": null,
"paymentPortal": null,
"routingNumberLast4": null,
"urgencyLanguage": []
}Totals
{
"currency": "USD",
"discount": null,
"shipping": null,
"subtotal": null,
"tax": null,
"total": null
}Advisory Notice: This analysis provides advisory signals only and is not a determination of fraud. All flagged items require human review before any action is taken. This output should not be used for automated decision-making.