Verify through a contact already on file
Use a phone number or contact route from your existing supplier records. A number included in the change request may lead back to the person making it. Ask the supplier to confirm the specific change and the invoice it affects.
The advisor flags payment change wording and other signals in the message. Your verification call or approved payee check remains necessary.
Record the decision
Keep the original request, the prior approved details, the verification date, and the name of the person who confirmed the change. Use a second approver when your payment policy requires one.
- Hold the payment update.
- Contact the supplier independently.
- Confirm the payee, affected invoices and effective date.
- Record the approval and retain the old details in history.
If the supplier denies the request
Preserve the message and inform the supplier through your established contact. Ask your IT administrator to investigate the addresses and conversation history. If funds were sent, contact the bank immediately.
Questions about this check
Is a call to the number in the email enough?
Use a number already in your records or obtained independently. A number supplied with the suspicious request cannot independently verify that request.
Should I mark every changed bank detail request as fraud?
No. Legitimate changes occur. Verify the change, document the result and approve it through the established process.
