Bank-change fraud protection for small businesses
Stop paying fraudsters when a supplier's bank details "change".
A criminal takes over a supplier's email, or fakes one that looks the same, and writes "our bank details have changed". The money is gone within hours. PayeeGuard checks the email, makes the call-back and a second approval part of the job, records the proof your insurer asks for, and flags any payment to an account nobody verified.
- Free scam check for "new bank details" emails, no sign-up
- Secure link for suppliers and staff to submit details, never by email
- Call-back on the number you already had, then a second person approves
- Tamper-evident log and a verification certificate for each change
- Alerts when bank details change in Xero or QuickBooks
- Checks your payment file before you pay
Is this bank-change email a scam?
Paste the email. For the strongest check, paste the original with headers (Gmail: ⋮ → Show original · Outlook: File → Properties → Internet headers). We don't store it.
Billions
Business email compromise is one of the costliest crimes reported to the FBI's Internet Crime Complaint Center every year (IC3 annual reports). Most of it is payments sent to the wrong account.
Hours
How long the money usually stays in the fraudster's account before it's moved on. Banks recover little once it's gone, which is why the check has to happen before you pay.
One call
A phone call to a number you already had stops almost every one of these frauds. The hard part is making sure it happens every time, and proving it did.
How it works
A bank change can't reach a payment until it's been verified.
PayeeGuard turns "someone remembers to phone" into a routine that runs the same way every time, with a record.
Check the request
Paste or forward the email. PayeeGuard checks the sender, lookalike and brand-new domains, reply-to tricks, failed authentication and the wording fraudsters use, and compares it with what you know about that supplier.
Collect details safely
Instead of accepting numbers by email, send the supplier or employee a one-time secure link. The contact already on file is told a change was submitted.
Call back, then approve
PayeeGuard shows the phone number from your records, never the one in the request. The payee reads the new account to you. A second person approves.
Pay with confidence
Upload your payment file before you pay. Any line going to an unverified, changed or previously rejected account is flagged in red.
Proof for your insurer
Every verification, written down the moment it happens.
Crime and cyber policies often cover "social engineering" losses only if you verified the change through a different channel. After a loss is the worst time to reconstruct who called whom. PayeeGuard records each step in a hash-chained log: if anyone edits an entry later, the chain breaks and the check says so.
Verification certificate · sample
- Payee
- Acme Supplies Inc
- New account
- Routing 021000021 · •••• 7766
- Requested
- Email, risk HIGH (lookalike domain, 5 days old)
- Call-back
- +1 555 0100 (number on file since 2024) · spoke to Sam · account read back and matched
- Called by
- Olivia Owner, 14 Oct 2026 10:42 UTC
- Approved by
- Max Member, 14 Oct 2026 11:05 UTC
- Log
- chain intact
Everything in the box
Built for the people who actually pay the bills.
Scam email check
Sender and reply-to domains, lookalikes of the real supplier, domain age, missing mail servers, SPF/DKIM/DMARC results, display-name tricks, urgency and "don't call me" wording, bank numbers abroad.
Secure bank-change link
One-time link that expires. IBAN, US routing, UK sort code, BSB, IFSC and Canadian numbers are checked for typos as they're entered. The old contact gets a heads-up.
Call-back workflow
Shows the number on file and warns if it changed recently. Refuses a call-back to the number given in the request. Asks the payee to read the account to you, not the other way round.
Two-person approval
The person who called can't approve their own call. Optional cooling-off hold after a change, so a rushed payment run doesn't go to brand-new details.
Xero and QuickBooks watch
Alerts when supplier bank details change in your accounting system without a matching verification, and opens a verification for it. Any other software: upload a supplier export.
Payment-run check
Upload the payment CSV before you send it. Each line is matched to verified details: green, check, or stop. Accounts you've rejected as fraud are blocked everywhere.
For bookkeepers and outsourced finance
One login for every client you pay bills for.
Up to 25 client companies, each with its own payees, log and accounting connection. Your team calls back, the client or a colleague approves, and you hand the client a certificate for every change.
Why firms use it
- A diverted client payment is a reputational disaster for a practice
- Same process across every client and every staff member
- Proof you followed it, if a client or insurer asks
Simple monthly pricing
Every plan is free during the founding beta. Prices below apply once billing starts; you'll get notice first.
Free
$0
- 1 company
- 10 email checks a month
- 3 verifications a month
- Secure links, call-back, two-person approval
Business
$29/month
- 1 company, 5 people
- Unlimited checks and verifications
- Verification certificates
- Payment-run check
Team
$79/month
- 3 companies, 15 people
- Everything in Business
- Xero / QuickBooks bank-detail watch
- Supplier-list watch for any software
Bookkeeper
$199/month
- Up to 25 client companies
- Unlimited people
- Everything in Team
- One login across clients
Questions
Is the email check really free?
Yes. Paste an email on this page and you get the risk check without an account. We don't store the email. The free account adds 10 checks a month inside the app plus 3 full verifications.
Does PayeeGuard move money?
No. You keep paying suppliers and staff the way you do today. PayeeGuard sits before that: it checks the request, guides the call-back, gets a second person's approval, records it, and checks your payment file against verified details.
Can it tell me for certain that new bank details are real?
No tool can do that from an email alone, because the real supplier's mailbox may have been hacked. That's why PayeeGuard always sends you to a phone call on a number you already had, and records it.
Do you store our suppliers' full account numbers?
Only while a change is being verified, encrypted, and for a short window after approval (30 days by default) so you can copy them into your banking. After that we keep only the last 4 digits and a keyed fingerprint, which is enough to spot a mismatch but can't be turned back into the number.
Will this satisfy my insurer?
Many crime and cyber policies only pay for 'social engineering' losses if a bank change was verified through a different channel, like a call-back. PayeeGuard records who called, which number, when, what was confirmed and who approved, in a tamper-evident log you can export. Check your own policy wording: we can't promise what an insurer will accept.
We use Xero or QuickBooks. Does it connect?
Yes, on the Team and Bookkeeper plans PayeeGuard watches supplier bank details in Xero or QuickBooks Online and alerts you when someone changes them without a verification. If you use other software, upload a supplier export and PayeeGuard compares it with the last one.