AP professional nearly paid a fraudulent invoice after a vendor's email thread was compromised, revealing that existing verification processes fail to catch mid-thread banking change scams.

Workarounds Described

• Relied on noticing a small inconsistency in email wording to trigger a manual phone call verification
• No formal process existed to independently verify banking changes in an existing email thread

Implied Software Gaps

• Automated anomaly detection that flags changes in payment details within ongoing vendor communications
• Mandatory multi-factor verification workflow triggered by any change to vendor remittance information

VendorPay Lock

VendorPay Lock is a verification platform that integrates with AP systems to automatically flag and hold any payment when vendor banking details change. It requires multi-channel confirmation (e.g., phone call with pre-registered contact, one-time code via known vendor portal) before releasing funds. It logs all verifications for audit, preventing Business Email Compromise (BEC) attacks.