Accounts Payable & Receivable › Vendor Management
Why are controls over vendor bank-detail changes so important?
IntermediateAnswer
Changing a vendor's bank details is a prime target for fraud (business email compromise): a fraudster poses as a supplier and requests a new account. Controls include independent verification via a known phone number (call-back), dual approval of master changes, logging who changed what, and never using contact details from the change request itself.
Real-world example An emailed request to change a supplier's bank account is verified by calling the supplier's known number, exposing a fraud attempt.