A Vendor ACH Change Should Be Verified Before Anyone Touches the Payment Record
A vendor ACH change verification process helps small businesses stop invoice fraud before a trusted supplier record is changed.
A vendor ACH change request is not a bookkeeping update until the business verifies it outside the email thread.
A vendor ACH change verification process is a short hold-and-confirm routine before anyone edits supplier bank details. The direct answer is simple: do not rely on the email that requested the change; verify the new payment instruction through a known phone number, known portal, or previously approved contact first.
The expensive mistake is treating a vendor bank change like a normal master-file update. A small business may recognize the vendor name, invoice format, email signature, and timing, but that does not prove the account number is legitimate.
The FBI warns businesses to verify payment and purchase requests through a separate channel when possible, especially changes in account numbers or payment procedures.
The Vendor ACH Change Fraud Verification Kit gives you the approval log, callback script, and evidence checklist for making the hold defensible.
What to verify before changing bank details
| Checkpoint | What to inspect | Why it matters |
|---|---|---|
| Request source | Email address, domain, reply-to path, portal message, and attachments. | Fraud often hides inside a familiar-looking message thread. |
| Known contact | Phone number or contact already stored before the request. | Calling the number in the new email can route you to the fraudster. |
| Invoice timing | Whether the change appears before a large or rushed payment. | Urgency is a common pressure signal. |
| Approval trail | Who verified, approved, and released payment. | The business needs proof if the payment is questioned later. |
The four rules for a safer ACH change
The bookkeeper updates the bank record because the email came from a familiar vendor contact and the invoice is due today.
The bookkeeper holds payment, calls the old number on file, logs confirmation, and gets approval before changing the record.
The callback script you can copy
Hi [vendor name], this is [your name] from [business]. We received a request to change ACH details for [invoice or account]. For fraud prevention, I am calling the number already on file before we make any change. Can you confirm whether your company requested a bank-detail update? If yes, who authorized it and when should it take effect?
Get the free Emergency Triage Sheet
The first three moves for any business emergency, plus one practical fix in your inbox each week.
No spam. Unsubscribe anytime.
Small business example
A contractor receives a vendor email asking to move a $6,800 materials payment to a new account. The office manager opens the vendor record, calls the phone number saved from prior orders, and learns the vendor did not request a change. The original invoice is paid through the old method, and the attempted change is saved in the AP evidence folder.
Before you release the payment
- Confirm through a contact method that existed before the request.
- Save the suspicious email, attachments, and screenshots.
- Record who verified and who approved the record edit.
- Use a short waiting period for first payments to newly changed accounts when cash timing allows.
- Train staff to treat rush language as a risk signal.
FAQ: should you reply to the change email?
Do not use the same email thread as your only verification path. Replying can be useful after you confirm through a known contact, but the confirmation that protects the business should happen outside the request channel.
Related operating controls
Pair this with the vendor invoice discrepancy review process when the dollar amount or invoice details also look wrong.
For broader setup, use the new vendor payment terms checklist before the first payment is due.
Free version vs. full kit
This article gives you the free version: the hold rule, callback script, approval table, and release checklist. The full Vendor ACH Change Fraud Verification Kit adds the master-file change log, evidence folder, approval workflow, and staff training script.
View the Vendor ACH Change Fraud Verification Kit
Related article: Accounts Payable Aging Report Vendor Catch-Up
Fix the next one before it starts.
Join the list for the free Emergency Triage Sheet and a new practical fix every week.
No spam. Unsubscribe anytime.