The 60-second authenticity test.
Do not call the number on the letter. Do not type the letter's URL. Verify from a source you find independently.
| Check | What to look for | Default action |
|---|---|---|
| Fine print | "Not a government agency," "solicitation," "no obligation," or "not endorsed." | Treat as private sales mail. |
| Payee | Private LLC, "Compliance Division," "Corporate Records," wire/Zelle/gift card, or P.O. box. | Do not pay. |
| Real due date | Compare with your Secretary of State account, tax calendar, payroll vendor, or registered-agent dashboard. | Use your calendar, not the letter. |
| Agency route | Find the agency yourself: state SoS, IRS, DOL, USPTO, SAM.gov, utility account, bank portal. | Navigate independently. |
| Threat type | ADA, copyright, patent, debt collection, court papers, tax notice, or actual state delinquency. | Verify within 24 hours; do not toss blindly. |
1. Hunt the disclaimer
California's Secretary of State highlights solicitations whose own text says they are not from a government agency and are not bills.
2. Identify the real agency
Annual reports, good-standing certificates, EINs, posters, trademarks, and SAM registrations each have an official home.
3. Compare the fee
A $125 or $200 invoice often maps to a free or low-cost government task. The price gap is the tell.
4. Re-initiate contact
Use the account portal, bill, card, or agency site you already trust. Never verify through the suspect notice.
5. Slow legal mail down
Legal-shaped threats get a same-day payment ban and a 24-hour verification window.
Trigger timeline: when the wave tends to arrive
Public record scraped after formation. Weeks 1-8Poster and EIN services
Compliance fear, especially before hiring. Year 1 anniversaryAnnual-report services
Real deadline, private middleman. After trademark filingUSPTO-lookalike invoices
Public trademark record fuels fake urgency. Any timeEmail and invoice fraud
Payment changes and fake bills hit the AP inbox.
The mail wave: official-looking solicitations after formation.
Is this Certificate of Existence, Status, or Good Standing letter from the state?
Search phrases: certificate of existence letter scam, certificate of status notice, good standing request form.
Is this annual report filing service notice legitimate?
Search phrases: annual report compliance notice scam, annual minutes form, corporate record form.
Do I need to pay this labor-law poster invoice?
Search phrases: labor law poster scam, workplace poster invoice, compliance poster penalty.
Should I pay a company to get my EIN?
Search phrases: EIN filing service scam, IRS EIN fee, employer identification number service.
Is this USPTO trademark renewal or monitoring invoice real?
Search phrases: USPTO trademark renewal scam letter, trademark office agency invoice, WIPO register solicitation.
Is this domain renewal notice actually a transfer?
Search phrases: domain registry invoice scam, domain slamming letter, website domain renewal notice.
Is this Yellow Pages or business directory invoice valid?
Search phrases: Yellow Pages invoice scam, business directory listing scam, free listing bill.
Do I need to buy a D-U-N-S, credit, or government-contracting listing?
Search phrases: DUNS listing solicitation, SAM registration service, Unique Entity ID fee.
Did my business really win a grant or award?
Search phrases: business grant processing fee scam, best business award invoice, selected for award fee.
Is this workers-comp or insurance audit notice real?
Search phrases: workers comp audit solicitation, insurance audit notice scam, payroll audit invoice.
The calls and emails that hit once the business looks alive.
Is this Google Business Profile suspension call real?
Search phrases: Google Business Profile call scam, listing suspended robocall, verify Google listing fee.
Is this SEO or web-presence authority claim real?
Search phrases: SEO invoice scam, search engine optimization fake invoice, website compliance service call.
Is this utility disconnect-today call real?
Search phrases: business utility disconnect scam, electric company gift card call, past due utility threat.
Did we really order toner or office supplies?
Search phrases: toner scam invoice, unordered office supplies scam, phantom supply order.
Is this vendor bank-detail change email safe?
Search phrases: business email compromise vendor bank change, invoice wire fraud, fake CEO gift card request.
Should HR update direct deposit from this email?
Search phrases: payroll diversion phishing, employee direct deposit change scam, HR payroll email scam.
Is this OSHA, health inspector, or licensing visit real?
Search phrases: fake OSHA inspector scam, health inspector call scam, business license inspection fee.
Should we pay this unfamiliar or past-due invoice?
Search phrases: fake business invoice scam, past due invoice scam, AP invoice controls small business.
Legal-shaped threats get a 24-hour protocol, not a same-day payment.
The mistake cuts both ways: panic-paying a mass demand can be wasteful; ignoring a real legal claim can escalate. Verify independently, preserve evidence, then decide.
Is this ADA website demand letter real?
What arrives: A lawyer letter or email alleging website accessibility barriers and proposing settlement.
What's real: DOJ ADA guidance says Title III applies to businesses open to the public and their web offerings. Private demand mills also exist.
Wrong moves: Pay the first demand without review, or ignore it as junk.
Response: Preserve the letter, verify the sender, involve counsel if it is from a real firm or claimant, and start fixing accessibility barriers. A credible remediation path changes the negotiation.
Is this copyright image demand inflated or fake?
What arrives: A demand for website image use, often from a rights-enforcement company or photo agency representative.
What's real: Copyright can exist from creation; U.S. works generally need registration before federal suit. CCB claims cap total damages at $30,000.
Wrong moves: Destroy evidence, admit willfulness casually, or assume "found online" is a license.
Response: Screenshot the page, remove the image if unlicensed, verify ownership/registration, check your license history, negotiate in writing, and get counsel for suit threats.
Is this patent troll letter a scam?
What arrives: A patent demand alleges your website checkout, Wi-Fi, scanner, app, or industry equipment infringes a patent.
What's real: FTC defines patent assertion entities as firms that acquire patents and seek money by licensing or suing accused infringers.
Wrong moves: Debate claim charts yourself, call the sender to explain your business, or ignore a complaint from a court.
Response: Preserve the letter and product facts. Do not respond substantively without counsel or an industry association/legal clinic that handles patent demands.
Is this fake business-debt collection?
What arrives: A collector demands payment for a directory, loan, merchant cash advance, lease, or old invoice you do not recognize.
What's real: Business debts can be enforceable, but fake collectors and inflated invoice scams exploit fear of credit damage or litigation.
Wrong moves: Pay to make calls stop, or disclose banking data before validation.
Response: Demand written substantiation, match the claim to contracts and invoices, and use the verification discipline from debt-collection defense before paying.
What to do when the letter is in your hand.
If unsure
Search for the agency or vendor yourself, not from the notice. Compare entity ID, due date, payee, amount, and account status. If it is not in the agency portal or vendor account, it is not payable yet.
If you paid
Contact the card issuer or bank immediately and ask about dispute, chargeback, recall, stop payment, or account lock. Recovery odds are much lower for wire, check, gift card, and crypto, but speed still matters.
If mail keeps coming
Keep a folder of examples, mark private solicitations as non-payable, and brief whoever opens mail. The formation-triggered wave usually subsides after the first public-record scrape cycle.
For teams
Use one AP rule: no payment without a PO or known vendor record; all bank-detail changes verified by phone at a number already on file. That stops most small-business invoice fraud.
Where to report
- FTC: report fraud, scams, and bad business practices at ReportFraud.ftc.gov.
- USPIS: report mail scams and mail fraud patterns to the U.S. Postal Inspection Service.
- IC3: report BEC, phishing, wire, crypto, and cyber-enabled fraud at IC3.gov.
- State AG/SoS: report state-specific corporate mailers to your Attorney General or Secretary of State consumer alert channel.
Two-line AP policy to paste into your handbook
No invoice is paid unless it maps to a known vendor, approved purchase, received service, and expected amount.
No bank-account, wire, ACH, payroll, or mailing-address change is accepted by email alone; verify by phone using a number already on file.
Anti-patterns that keep the scam channel profitable.
Paying "because it is only $90"
Small invoices are priced below the pain of investigation. Payment marks your business as responsive and may invite more solicitations.
Using the letter's phone number
That only proves the sender answers its own mail. Verify through the agency, vendor, registrar, utility, bank, or portal you find independently.
Tossing legal-shaped mail
ADA, copyright, patent, and debt claims can be inflated or abusive while still requiring a real response protocol.
Trusting a known vendor's email
BEC often uses compromised real accounts. A real email address does not authenticate new bank details.
Letting new staff open mail cold
The receptionist, intern, bookkeeper, or spouse needs the same short briefing: solicitations are not bills; legal-shaped mail gets verification.
Staying silent after paying
Report it. FTC, USPIS, state AG, and Secretary of State alerts are built from patterns businesses report.
Primary sources checked for volatile facts.
California SoS misleading solicitations
Florida Sunbiz unofficial mail notices
Colorado compliance-services alert
Colorado business fee schedule
Colorado periodic report fee release
Florida annual report instructions
USPTO trademark scam warnings
USPTO examples of solicitations
USPTO non-USPTO patent/trademark solicitations
Google Business Profile third-party policies
IC3 BEC PSA
FTC report fraud contact page