Key Takeaways
- A bank-detail change request does not move money by itself; the risk begins when you edit the beneficiary and release payment.
- Verify the request through a trusted channel before changing the payee record.
- The practical cut-off is when your bank or payment provider accepts the payment order.
- After acceptance, cancellation or recall usually requires cooperation from the receiving bank and may fail.
- Use dual approval, beneficiary controls, independent call-backs, and documented verification for every change.
The Short Answer
If a supplier changes its bank details before payment, pause the payment and verify the request independently.
Do not update the beneficiary based only on an email, invoice, or message. Call a known supplier contact using a phone number already in your records, confirm the change, obtain separate written confirmation, and require a second approver before releasing funds.
The key point is this:
A supplier message is not a payment instruction. The risk begins when you act on it.
Before the payment order is accepted by your bank or payment provider, you can usually stop or amend it. After acceptance, recovery becomes a request rather than a guaranteed right.
What Happens at Each Stage?
1. The request arrives
No money has moved. The payment remains under your control.
At this stage:
- Do not reply to the original message to verify it.
- Do not click links in the request.
- Do not update the beneficiary record.
- Do not allow urgency to bypass approval procedures.
Business email compromise often relies on familiar suppliers, realistic invoices, and last-minute timing. The FBI recorded 24,768 business email compromise complaints and reported losses of approximately US$3.05 billion in 2025. FBI IC3
2. The payment is prepared but not sent
This is the safest point to stop.
You can:
- Reject the bank-detail change.
- Keep the existing beneficiary.
- Contact the supplier independently.
- Escalate the request to finance or compliance.
- Delay the payment without creating a recovery problem.
A genuine supplier should accept a reasonable verification process. Urgency is not evidence of authenticity.
3. The payment order is submitted
Once submitted, contact your bank or payment provider immediately if you suspect fraud.
Whether cancellation is possible depends on whether the payment order has been accepted and whether the provider can stop it before execution. Under U.S. UCC § 4A-211, cancellation is generally effective only before the bank accepts the payment order. Cornell Legal Information Institute
4. The payment is accepted and in transit
After acceptance, cancellation or amendment generally requires the receiving bank’s agreement under UCC § 4A-211(c). A recall is therefore not an automatic right.
For international payments, contact the sending bank or provider immediately and request a trace or recall. Swift’s Stop and Recall process is designed for payment cancellation messages, but a cancellation request does not guarantee that funds will be recovered. Swift
5. The beneficiary bank receives the payment
For some payment types, the beneficiary bank may rely primarily on the account number or other account identifier. Under UCC § 4A-207, the bank may not be required to determine whether the account name and number identify the same person. Cornell Legal Information Institute
This means a matching supplier name is useful, but it is not a substitute for independent verification.
6. Funds reach the wrong account
Recovery becomes difficult. The receiving bank may need the recipient’s cooperation, and the funds may already have been moved.
Wise states that recalls may require the recipient’s explicit acceptance, are not guaranteed, and can take several weeks. Wise
The Verification Process
Step 1: Pause the payment
Do not edit the beneficiary or release funds until the request is verified.
Step 2: Use a trusted contact channel
Call:
- A phone number in your supplier master record.
- A known account manager.
- The supplier’s previously verified switchboard.
- A contact established before the bank-detail change.
Do not use a number or link supplied in the change request.
Step 3: Confirm the full change
Ask the supplier to confirm:
- The old bank details.
- The new bank details.
- The legal account-holder name.
- The reason for the change.
- The effective date.
- The affected invoice or purchase order.
- The payment currency.
Step 4: Obtain independent written confirmation
Request confirmation through a separate channel, such as:
- A verified supplier portal.
- A procurement system.
- A previously established business contact.
- A signed document returned through an approved process.
Step 5: Apply dual approval
A second authorised employee should review:
- The supplier’s legal name.
- The new beneficiary details.
- The independent call-back record.
- The invoice and purchase order.
- Any difference in country, currency, or account ownership.
Step 6: Consider a test payment
For material payments, send a small test amount where appropriate. Confirm receipt through the known supplier contact before releasing the balance.
Payment Routes and Their Stop Points
| Payment route | Last practical stop point | What happens after release? |
|---|---|---|
| XTransfer | Before releasing payment from the approved payee record | Recovery depends on corridor and provider action |
| Local bank transfer | Before bank acceptance or execution | Recall may be possible but is not guaranteed |
| International wire | Before the sending bank accepts the order | Recall generally requires cooperation |
| Escrow | Before the platform releases funds | Funds remain held until release conditions are met |
| Letter of credit | Before the credit is amended | Changes require documentary and bank procedures |
| PayPal or online payment service | Before payment confirmation | Dispute process may apply; it is not a bank recall |
| Card payment | Before settlement | Chargeback rights may apply under scheme rules |
| Cash transfer | Before the recipient collects funds | Recovery is usually very limited |
| Cash | Before handing over cash | No practical recall or trace |
How XTransfer Supports Controlled Supplier Payments
XTransfer separates its products into three payment workflows. Each addresses a different operational need.
Local Accounts
XTransfer Local Accounts provide eligible businesses with access to supported local payment networks across approximately 60 countries and regions. XTransfer Local Accounts
Local Accounts can help businesses:
- Pay or collect in supported local currencies.
- Use structured beneficiary information.
- Reduce manual copying from emails or invoices.
- Keep payment records in one platform.
- Support local settlement where available.
For supplier payments, the key benefit is control over the payee record. A change should be treated as a new beneficiary event requiring verification and approval.
Global Accounts
XTransfer Global Accounts support multi-currency receiving and payment workflows, including USD, EUR, GBP, CNY, HKD, SGD, and AUD. XTransfer Global Accounts
Global Accounts can help businesses:
- Manage multiple currencies in one platform.
- Centralise supplier payment records.
- Reduce repeated manual data entry.
- Improve reconciliation and payment visibility.
- Support international payouts to eligible business bank accounts.
Cross-border payments may involve additional banks and processing stages. Businesses should verify the beneficiary before releasing each payment, especially when account details change.
X2X
X2X supports transfers between XTransfer accounts. Eligible X2X transfers can settle near instantly and carry zero transaction fees. XTransfer payment services
X2X can help businesses:
- Transfer funds between participating XTransfer accounts.
- Reduce repeated entry of external bank details.
- Keep payment activity within a defined network.
- Improve transaction traceability.
- Reduce the risk of account-number substitution on recurring payments.
X2X does not eliminate verification requirements when the supplier’s account, business identity, or payment instructions change.
Risk and Compliance Infrastructure
XTransfer's infrastructure uses AI-powered monitoring and a knowledge graph covering approximately 30 million enterprise entities. The company also reports more than 170 financial-institution partnerships and a global fraud rate as low as 0.003%. XTransfer risk and compliance
XTransfer also operates through regulated entities and financial-institution partners across major payment hubs, including:
- United States: FinCEN-registered Money Services Business, with state-level Money Transmitter Licences across 36 states.
- Canada: FINTRAC-registered Money Services Business.
- Australia: AUSTRAC-registered Remittance Service Provider.
- United Kingdom: Authorised Payment Institution.
- Singapore: Major Payment Institution licence.
- The Netherlands: Electronic Money Institution licence.
- Malaysia: Conditional approval for specified payment licences, including electronic-money issuance and a Class A Money Services Business licence.
- United Arab Emirates: In-principle approval for a Retail Payment Services Licence.
- Chile: UAF registration for XTransfer Chile SpA, strengthening its local AML and compliance framework.
These regulatory statuses apply to specific legal entities and activities. A registration, licence, exemption, or conditional approval does not mean that every product, currency, or payment route is available in every market.
If You Already Paid the Wrong Account
Act immediately:
- Contact your bank or payment provider.
- Request a recall and payment trace.
- Report the transaction as suspected fraud.
- Contact the genuine supplier using a known channel.
- Preserve emails, invoices, payment instructions, and message headers.
- Notify your finance, compliance, and management teams.
- Report the fraud to the relevant authorities.
- Review all recent beneficiary changes for similar activity.
Do not wait for the suspicious sender to respond.
FAQs
Can I cancel a payment after the bank accepts it?
Usually, cancellation becomes more difficult after acceptance. The sending bank may need the receiving bank’s cooperation, and recovery is not guaranteed.
How long do I have to stop a payment?
The practical window is before the payment provider accepts or executes the payment order. Contact the provider immediately; do not wait for the supplier to confirm by email.
Is a matching beneficiary name enough?
No. Name matching can identify inconsistencies where supported, but it does not prove that the supplier requested the change. Independent verification is still required.
Who bears the loss if the money reaches the wrong account?
The sender may bear the loss unless the bank, payment provider, insurance, contract, or applicable law provides another remedy. Recovery depends on the payment route and the recipient’s cooperation.
Should I refuse a supplier bank-detail change?
Not automatically. Legitimate suppliers do change banks. The correct control is to pause, verify independently, document the change, and obtain second approval.
Is a local account safer than an international wire?
A local account can reduce the number of intermediary banks and make beneficiary information easier to control. It does not remove fraud risk, so a new beneficiary must still be verified before payment.
Does XTransfer guarantee that a payment is safe?
No provider can guarantee that every fraudulent payment will be prevented. XTransfer’s controls and regulated-entity framework may support more structured payment workflows, but businesses remain responsible for verifying supplier changes and approving payments.
Disclaimer
This article is compiled from publicly available sources and interview content for informational purposes only and does not represent the official views of XTransfer. XTransfer accepts no liability for any damages arising from reliance on this content.


