Bank-account change control

Catch vendor bank detail change fraud before the payment leaves

Vendor bank detail change fraud starts with a message that looks like it comes from a real supplier: “we have changed banks, please pay the new account.” Invogi compares the bank account on every supplier invoice with the accounts that supplier has used before, and sends any change to review before you pay.

No card required · results in minutes · up to 500 invoice records free

Why a bank-account change is the signal to watch

Payment diversion fraud rarely uses a fake invoice number or an odd amount. The invoice looks exactly like the supplier's last one. The only thing that changes is where the money goes. A duplicate check will not catch it; a check on the bank account will.

What Invogi checks

  • New account for a known supplier. The IBAN on the invoice is compared with every account that supplier has used before. A new one is flagged for review.
  • Country change. If the new account is in a different country from the supplier's most-used account, the finding is raised to high severity.
  • Evidence you can act on. Each finding shows how many accounts the supplier has used, how often the most-used one was paid, when it was first and last seen, and the recommended next step: verify the new account with the supplier through a channel you already trust.

Where the bank details come from

  • CSV or XLSX upload: map an IBAN column when you confirm the column mapping.
  • API: send the supplier bank account with each invoice. See the developer docs.
  • Business Central: through a custom vendor bank API page, described in the Business Central guide.
  • PDF and e-invoices: the bank account is read from the document when it is present.

Pair it with a process control

Software catches the change; people verify it. Keep a written rule that any bank-detail change is confirmed by phone using a number from your own records, never one from the email that requested the change. Invogi makes sure that rule is applied to every invoice, not just the ones someone happened to notice. The control is part of Invoice Firewall and runs in the free AP Risk Scan when your export includes an IBAN column.

FAQ

Common questions

What is vendor bank detail change fraud?

A fraudster impersonates a real supplier, often from a compromised or look-alike email account, and asks you to pay future invoices to a new bank account. It is also called payment diversion or business email compromise fraud.

Does Invogi verify who owns a bank account?

No. Invogi does not query banks or account-ownership registries. It detects that a supplier's bank account has changed, or moved to a different country, and asks your team to verify the change with the supplier through a known channel before payment.

Will every new supplier be flagged?

No. The first bank account seen for a supplier is recorded, not flagged, because there is nothing to compare it with. Only a later invoice with a different account is flagged.

Can Invogi block the payment automatically?

By default a bank-account change is a REVIEW decision, not a BLOCK. Your team decides whether to release the invoice after verifying the new account.

Keep reading

Related guides

Invoice Firewall

Invoice fraud detection software that checks every supplier invoice before payment: duplicates, bank-detail changes, and anomalies, with evidence.

Business Central duplicate invoices

Business Central duplicate invoice detection: why external document number checks miss near-duplicates, and how Invogi's connector checks every invoice.

AP recovery audit alternative

An AP recovery audit alternative: find duplicate payments in your own AP export for free, then stop new ones before payment instead of chasing refunds.

Ready to see your exposure?

Scan your AP export for bank-account changes.

No integration required. Upload a CSV or XLSX export of your AP transactions and see duplicate and anomaly exposure, with evidence, in minutes.