10/15/2026
๐ A new bank account is not a routine update
A supplier email arrives with a real invoice and one change: new bank details. The invoice matches the PO, and a three-way match usually compares PO, receipt and invoice, not the bank account.
The Internal Revenue Service reminded businesses on October 2 that requests to change payment information should be verified through a trusted channel. The FBI's 2025 Internet Crime Report counted 24,768 business email compromise complaints and about $3.0 billion in losses.
Here is the check we would run:
1. Log the change request and pay nothing to the new account yet
2. Call the phone number already in your vendor file, never the one in the email
3. Have a second person approve the change
4. Release the first payment only after both
๐งฎ Illustrative: 40 suppliers, six bank-detail changes a year. That is six 10-minute calls, about an hour, against one $18,500 invoice sent to the wrong account.
โ
Success test: no vendor bank detail changes without a logged call and a second approver.
โ ๏ธ A callback only works if the phone number in your file is trusted. Never change a vendor's bank details and phone number in the same request.
๐
Book an AndWeSupport strategy call: https://lnkd.in/g4NTNawB