A supplier changes bank details
Compare the payee and account details with a previously verified supplier record. Confirm any change using a trusted contact route, not the details supplied in the new email.
For finance and operations teams
Review invoice fraud risks before you change where a payment goes.
An invoice can look familiar while the sender, payee or bank details have changed. Give your team a consistent way to inspect the request, compare the evidence and verify it independently.
Looking at one unexpected consumer bill? Use the existing invoice scam checker.
Three requests worth stopping to verify
An urgent payment arrives from a familiar name
Check the sender address and the full conversation. Familiar branding, a signature or a plausible explanation does not establish who controls the message.
An invoice has no matching purchase
Check the purchase order, goods or services received and expected payment terms. Escalate inconsistencies before creating or approving a payment.
Use IsThisSpam to support the review, not approve the payment
1. Bring the evidence together
Review the message, sender, links and relevant supplier details in a business investigation. Keep sensitive information limited to what is necessary for the check.
2. Compare the details
Invoice Guard can flag changes against a previously verified supplier baseline. A new or incomplete baseline cannot establish that a supplier is genuine.
3. Verify outside the suspicious message
Use a previously trusted supplier contact or independently obtained official contact details. Do not use the new phone number or link in a payment-change request as your verification route.
4. Record who checked and what they confirmed
Keep the evidence, reviewer discussion and outcome in the shared case. Follow your own payment authorisation and separation-of-duties policy.
What to agree before rolling it out
Choose who creates verified supplier baselines, who reviews payment-detail changes and who can authorise payments. Confirm the plan features, permissions, retention settings and any provider-dependent checks with us. The existing business onboarding flow creates the workspace; it does not require staff to use the public scanner.
Read the business email compromise guide or explore the shared business workspace.