Payment verification checklist
Ten rules that stop most invoice and CEO fraud. Agree them with your team, print them, put them next to the payment screen.
- Bank detail changes are never accepted by email, chat or phone alone.
- Every bank detail change is confirmed by calling the supplier on the number already in our vendor master.
- New or changed bank details trigger a cooling-off period and a second approver.
- Payments above our threshold need two independent approvals in the finance system.
- No payment is made because of a video call, voice call or chat message — only through the normal workflow.
- Requests involving secrecy, urgency or bypassing the process are escalated, not executed.
- Nobody buys gift cards or crypto on an executive's request.
- Salary account changes only through the HR system, confirmed with the employee in person or on their known number.
- We never log in through links in invoice emails — we open portals ourselves.
- Everyone knows how to report a suspicious request, and is thanked for it — even when it turns out to be genuine.
Free to use and adapt. From Trusterity — trusterity.io