How to Verify a Supplier Bank Account Change Before Paying

A supplier bank-account change should trigger an independent verification process—not an email reply.

Use this sequence:

1. Pause the payment.
2. Call a known supplier contact using an existing number.
3. Confirm the change verbally.
4. Obtain written confirmation through a separate channel.
5. Verify the beneficiary name and account details.
6. Require a second approver.
7. Make a small test payment where appropriate.
8. Record the verification before releasing the full amount.

If the supplier cannot confirm the change independently, do not pay the new account.

If the bank-change request arrived by email, the email account, thread, or sender identity may already be compromised. Replying to the same thread does not create independent verification.

Business email compromise frequently uses familiar invoices, supplier names, logos, and previous payment history. The message does not need to look suspicious; it only needs to redirect one payment.

The FBI recorded 24,768 business email compromise complaints and reported losses of approximately US$3.05 billion in 2025. FBI IC3

The European Banking Authority and European Central Bank reported that payment-service users bore approximately 85% of credit-transfer fraud losses in 2024, mainly because users were manipulated into authorising fraudulent payments. EBA and ECB

1. Independent call-back

This is the most important control and works across payment methods.

Use:

• A phone number from your supplier master record.
• A contact established before the payment change.
• A known company switchboard.
• A previously verified business contact.

Do not use:

• The phone number in the change request.
• A newly provided WhatsApp number.
• A number included in a revised invoice.
• Contact details supplied only after the request.

Ask the supplier to confirm:

• The old bank details.
• The new bank details.
• The reason for the change.
• The effective date.
• The invoice or purchase order affected.

2. Beneficiary-name verification

Some payment systems compare the beneficiary name with the account-holder name before payment.

The UK’s Confirmation of Payee service can return a match, close match, or no match. Payment Systems Regulator

The euro area’s Verification of Payee requirements were introduced under Article 5c of Regulation (EU) 2024/886. EUR-Lex

Name checking is useful, but it is not universal. It may not apply to:

• International wires.
• Every currency.
• Every payment provider.
• Every recipient bank.
• Accounts outside the relevant domestic payment scheme.

A “match” confirms account-name consistency. It does not prove that the supplier requested the change.

3. Recall after release

A recall is a recovery attempt, not a prevention control.

Once funds are released:

• The recipient bank may need to cooperate.
• The recipient may need to consent.
• Recovery may take weeks.
• Recovery is not guaranteed.
• Some payment routes may not support a practical recall.

Wise states that recalls require recipient acceptance, may take several weeks, and may fail if the beneficiary bank does not respond. Wise

The rule: verify before payment; do not rely on recall after payment.

Before changing the beneficiary record

• Freeze the affected payment.
• Compare the request with the supplier’s existing records.
• Check whether the request arrived shortly before a payment deadline.
• Call a known contact independently.
• Confirm the new account details verbally.
• Request written confirmation on a separate channel.
• Validate the beneficiary’s legal name.
• Check the country, currency, bank, and account number.
• Obtain approval from a second authorised employee.
• Keep a record of the verification.

Before releasing the first payment

• Confirm the invoice and purchase order.
• Check whether the bank account is held in the supplier’s legal name.
• Send a small test amount where commercially appropriate.
• Confirm receipt with the known supplier contact.
• Release the balance only after the test is confirmed.

Warning Signs

Treat a bank-detail change as high risk when it includes:

• A request for urgent payment.
• A new beneficiary shortly before shipment.
• A change from a company account to a personal account.
• A request to pay a different country.
• A request to change the payment currency.
• A request to bypass normal approval.
• A request to communicate through a new channel.
• A refusal to complete a call-back.
• A bank account that does not match the supplier’s legal name.
• A request to pay outside a protected marketplace or escrow process.

The Financial Action Task Force identifies late changes to payment arrangements as a trade-based money-laundering risk indicator. FATF

Payment route	Beneficiary-name check	Independent verification	Recovery after payment
Local bank transfer	May be available through domestic schemes	Yes	Possible but not guaranteed
International wire	Usually limited or unavailable	Yes	Slow and uncertain
Escrow	Beneficiary controlled by platform	Yes, before release	Funds held until release
Letter of credit	Beneficiary named in documentary credit	Yes	Governed by credit terms
Platform transfer	Payee may be stored in platform records	Yes	Platform-dependent
Card payment	Merchant identity, not bank-account name	Limited	Chargeback or dispute process
Cash transfer	Limited account verification	Rarely practical	Very limited
Cash	None	No reliable control	None

The strongest common control is still independent call-back verification before release.

XTransfer’s payment products provide different controls depending on the payment workflow. They should not be treated as interchangeable.

Local Accounts

XTransfer Local Accounts allow eligible businesses to collect or pay through supported local payment networks across approximately 60 countries and regions. XTransfer Local Accounts

Customer benefits:

• Use structured account details instead of copying bank information from email.
• Pay or collect in supported local currencies.
• Reduce manual re-entry of beneficiary information.
• Maintain a centralised record of payment activity.
• Support local settlement where the route is available.

Local Accounts are most useful when the beneficiary and payment route are established in advance. They do not eliminate the need to verify a supplier-requested change.

Global Accounts

XTransfer Global Accounts support multi-currency business payment workflows, including USD, EUR, GBP, CNY, HKD, SGD, and AUD. XTransfer Global Accounts

Customer benefits:

• Manage supported currencies in one platform.
• Keep supplier payment details in a controlled workflow.
• Reduce payment errors caused by repeated manual instructions.
• Improve visibility over outgoing payments.
• Support approval and reconciliation processes.

Global Accounts are designed for multi-currency operations, but businesses should still verify beneficiary changes independently.

X2X

X2X supports transfers between XTransfer accounts, with near-instant settlement and zero transaction fees. XTransfer payment services

Customer benefits:

• Transfer funds between participating accounts.
• Reduce the need to re-enter external bank details.
• Keep payment activity within a defined network.
• Improve transaction traceability.
• Reduce exposure to beneficiary substitution on repeated payments.

X2X does not remove the need for supplier verification when account ownership, business identity, or payment instructions change.

XTransfer's infrastructure uses AI agents, entity data, and a knowledge graph covering approximately 30 million enterprise entities to support risk and compliance screening. The company also reports a global fraud rate as low as 0.003%. XTransfer

XTransfer operates through regulated entities and financial-institution partners across major payment hubs. Its licences and registrations include:

• Chinese Mainland: Payment Business Permit.
• Hong Kong SAR: Money Service Operator licence.
• United Kingdom: Authorised Payment Institution licence.
• United States: Federal Money Services Business registration with the Financial Crimes Enforcement Network (FinCEN), together with Money transmitter licences across 36 states.
• Canada: Money Services Business registration with the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC).
• Australia: Remittance Service Provider registration with the Australian Transaction Reports and Analysis Centre (AUSTRAC).
• Singapore: Major Payment Institution licence issued by the Monetary Authority of Singapore.
• The Netherlands: Electronic Money Institution licence issued by De Nederlandsche Bank.

XTransfer also reported the following 2026 developments:

• Malaysia: Bank Negara Malaysia granted conditional approval for key payment licences, including electronic-money issuance and a Class A Money Services Business licence covering remittance and currency exchange. Services remain subject to pre-issuance conditions and approval to launch. XTransfer Malaysia announcement
• United Arab Emirates: The Central Bank of the UAE granted in-principle approval for a Retail Payment Services Licence. The licence remains subject to completion of pre-issuance conditions. XTransfer UAE announcement
• Chile: XTransfer Chile SpA completed registration with Chile’s Unidad de Análisis Financiero (UAF), strengthening its local compliance foundation and supporting cross-border B2B payment services. UAF registration should not be described as a standalone payment licence. XTransfer Chile announcement

These regulatory milestones support XTransfer’s ability to provide payment and collection services through the relevant legal entities and approved activities.

Act immediately:

1. Contact your payment provider or bank.
2. Request a recall or trace.
3. Mark the payment as suspected fraud.
4. Contact the legitimate supplier through a known channel.
5. Preserve emails, invoices, headers, and payment records.
6. Notify internal compliance and management.
7. Report the incident to the relevant law-enforcement or fraud-reporting authority.
8. Review other supplier beneficiaries for similar changes.

Do not wait for the supplier to reply to the suspicious email thread.

How should I verify a supplier bank-account change?

Call a known supplier contact using a number already held in your records, confirm the change verbally, obtain separate written confirmation, and require a second internal approver before payment.

Is a phone call enough?

It is stronger than an email reply but should be part of a documented process. Record who confirmed the change, when it was confirmed, which number was used, and what details were verified.

Should I reject every bank-account change?

No. Suppliers may legitimately change banks. The correct response is independent verification, not automatic rejection.

Can Confirmation of Payee stop supplier-payment fraud?

It can identify a mismatch where the relevant payment scheme supports name checking. It does not cover every international payment and does not prove that the supplier requested the change.

What if the supplier says the old bank account is closed?

Do not rely on that statement alone. Verify the new details through a known contact and use a controlled approval process before updating the beneficiary record.

Is a new beneficiary safer on a payment platform?

A platform-held payee record can reduce manual data-entry errors and create an audit trail. It does not replace independent verification when the beneficiary changes.

What is the safest payment method?

No single method eliminates fraud. Escrow and letters of credit can reduce certain counterparty risks, while structured account workflows can reduce payment-detail errors. Independent verification remains essential.

This article is compiled from publicly available sources and interview content for informational purposes only and does not represent the official views of XTransfer. XTransfer accepts no liability for any damages arising from reliance on this content.