Vendor bank-change policy
Use this as the default rule for any change to ACH, wire, routing, account, or payment method.
- Never update vendor payment instructions based on email alone.
- Call the vendor using a number already in vendor master records, a signed contract, or another trusted source.
- Require dual approval for every payment-instruction change.
- Document caller, number used, date, time, and verification outcome.
- Hold payment if the requester refuses callback or pressures AP to bypass controls.
Fake invoice hold triggers
Any one trigger should pause payment until AP completes verification.
- Bank details changed.
- Reply-to mismatch or free-mail finance contact.
- Urgent wire, same-day payment, secrecy, or executive pressure.
- Missing PO match or first-time vendor.
- New bank country, new payment method, or unusual amount.
Internal approval note template
Paste this into your payment approval trail after review.
- AP fraud check completed for [vendor].
- Risk level: [Low/Review/High].
- Key flags: [bank change / urgency / reply-to mismatch / missing PO / other].
- Verification completed by [name] using trusted number [source], on [date/time].
- Decision: [pay / hold / reject / escalate]. Second approver: [name].
Paid roadmap preview
This is the monetization path once traffic starts converting.
- Saved checks and searchable audit log.
- PDF reports for payment approvals.
- Team AP checklist templates.
- Vendor verification policy generator.
- $19/mo starter plan teaser for small teams.
AP Fraud SOP Kit FAQ
Is this legal or compliance advice?
No. It is an operational checklist for AP fraud risk indicators. Adapt it with your legal, finance, security, and compliance teams.
Does the kit store invoices?
No. The free MVP does not require file upload or stored invoices. The email form captures only contact details for the kit request.
Who should use it?
Small-business owners, controllers, AP teams, bookkeepers, finance operators, and IT/security leads supporting payment workflows.
What should we do after a High risk check?
Hold payment, verify through trusted vendor records, preserve evidence, escalate internally, and report confirmed fraud to your bank, FBI IC3, and FTC ReportFraud.