Resources
Practical guides for bookkeeping and accounting firms that run accounts payable for clients — how to verify vendor bank-detail changes, the controls insurers and auditors expect, and what to document.
Script
The word-for-word script for the call you are about to make: how to open, how to make the vendor read the new account details back to you, what to do if they push back, and what to log so the verification is provable later.
Read the guide →Guide
Melio's micro-deposits confirm an account can receive ACH, and its “verified vendor” lock blocks one attack path — but neither confirms a change request is real. What bookkeepers must document for NACHA Phase 2.
Read the guide →Compliance
NACHA Phase 2 takes effect Jun 22, 2026 — every ACH originator must document vendor bank-change verification. The minimum control set, what to update in the next seven days, and the evidence an ODFI or auditor will actually ask for.
Read the guide →Use case
The vendor bank-change verification routine that actually works for a firm running AP across multiple clients: per-client independent-contact callback, dual approval even at two people, and the log entry that holds up under an auditor or insurer's review.
Read the guide →Guide
BILL's one-cent test deposit confirms a vendor account can receive ACH — but not that the change request is real. BILL itself recommends verbally confirming new bank details. Where the gap is, and the one step that closes it.
Read the guide →Guide
When an auditor asks for your vendor verification documentation, they’re testing four things. The exact list of artifacts to produce, where the gap usually lives, and how to be ready in five minutes instead of five days.
Read the guide →Guide
QuickBooks Bill Pay’s penny test confirms an account can receive funds — but not that the change request is genuine, and you can’t independently re-verify after setup. Where the gap is, and the one step that closes it.
Read the guide →Guide
Most social-engineering coverage is conditional on a documented out-of-band callback before you change a vendor’s bank details — and claims get denied when it’s skipped or unrecorded. What insurers expect, and how to prove it.
Read the guide →Guide
You got the email and you’re not sure. How to tell a real request from a scam, the red flags to check, what to do before you pay, and how to recover if you already did.
Read the guide →Guide
The independent-contact rule, the exact callback to make, the red flags to watch, and what to record so you can prove you checked.
Read the guide →