What are vendor onboarding fraud checks?

Two verifications, ideally before the first payment: that a new vendor is a real legal entity (registry data — Middesk's layer) and that the bank account on the invoice actually belongs to that entity rather than to whoever filled in the form (Trustpair's layer). Most vendor payment fraud walks straight through the gap between those two checks.

We're small — do we really need all four layers?

No. Below a few hundred vendor payments a month, the honest priorities are the email layer, where the change-request scams actually arrive, and a callback procedure on every bank-detail change, which costs nothing. Entity and account verification start paying for themselves as vendor volume and invoice size grow.

What's the free version of this?

The callback. Every request to change vendor banking details gets confirmed by phone, at a number you already had on file — never one provided in the email requesting the change. It's unglamorous, and it has the best fraud-stopped-per-dollar ratio of anything in this directory.

Best-of guide

Best Vendor Payment Fraud Prevention Software

Vendor payment fraud is payroll fraud's bigger sibling: same playbook (get a bank account changed, wait for the payment run), larger checks. The defenses stack in layers, verify the entity exists, verify the bank account belongs to it, watch the email channel where the change requests arrive, and audit what got paid. No single tool does all four, so this list is organized by layer.

01
Trustpair
Checks that the bank account you're paying actually belongs to the vendor you think it does
The bank-account layer: validates account ownership in 190 countries and monitors your vendor file for quiet edits
Enterprise-only custom packages: platform access plus a contracted number of vendor evaluations and account validations per year. No self-serve tier — contact the vendor for current pricing; reported entry points sit in the low-to-mid five figures annually, which mid-market buyers regularly find sized above their needs. Liability coverage up to $1M on validated payments is part of the newer US packaging.7.7/10
02
Editor's Pick
Middesk
Verifies the business is real before you verify the human is
The entity layer: catches shell companies at onboarding via direct registry data
Contact the vendor for current pricing — Middesk negotiates per-verification rates based on volume. Companies running 1,000–5,000 checks a month have reported landing somewhere around $2–$5 per verification, with the number dropping as commitment and volume go up.8.2/10
03
Editor's Pick
Sublime Security
Serious BEC defense a small team can actually turn on: free for 100 mailboxes, no MX change
The email layer: catches the spoofed change-request before anyone edits the vendor file, and starts free
Genuinely free for your first 100 mailboxes, no credit card and no MX change. Above that it's a paid, quote-based subscription priced per mailbox, contact the vendor for current pricing. A free, open-source self-hosted version of the platform is available on GitHub for teams that want to run and extend it themselves.8.4/10
04
Editor's Pick
Ramp
Free corporate cards, expense, and bill pay, with AI that reads every expense for fraud
The SMB audit layer, free: AI policy review and duplicate-invoice detection built into the spend platform
The core platform, corporate cards, expense management, and bill pay, is free: $0 per user, no SaaS subscription. Ramp earns on card interchange and optional paid tiers (Ramp Plus and Enterprise add controls like custom approval logic and deeper integrations, quoted per company). The fraud and policy controls live in the free tier, not behind an upsell.8.4/10
05
BILL
The SMB accounts-payable standard, with the vendor and W-9 controls that make AP fraud hard
The AP-controls layer for SMBs: approval workflows, vendor verification, and W-9 checks that make fraud hard to slip through
Per-user monthly across four tiers: Essentials $49, Team $65, Corporate $89 (the popular tier, adding custom approval policies and two-way PO matching), and custom Enterprise. AR automation is available alongside AP. No free tier, this is a paid workflow platform, not a free spend tool like Ramp.7.8/10
06
AppZen
AI that reads every expense report and invoice before you pay it
The enterprise audit ceiling: autonomous AI review of every invoice and payment after the fact
Reported starting price around $5,000/month, scaling with volume and modules. Enterprise-oriented, custom quotes only.7.5/10
07
Alloy
The switchboard that runs every other identity vendor, if you're big enough to need one
The orchestration layer, if you're running several of the above at real volume
Contact the vendor for current pricing — contracts are platform-fee plus usage, sized for banks and fintechs, with a five-figure annual floor and a real procurement cycle. The underlying data-vendor costs (each check you orchestrate) are passed through or bundled on top.7.0/10

Questions buyers actually ask

What are vendor onboarding fraud checks?: Two verifications, ideally before the first payment: that a new vendor is a real legal entity (registry data — Middesk's layer) and that the bank account on the invoice actually belongs to that entity rather than to whoever filled in the form (Trustpair's layer). Most vendor payment fraud walks straight through the gap between those two checks.
We're small — do we really need all four layers?: No. Below a few hundred vendor payments a month, the honest priorities are the email layer, where the change-request scams actually arrive, and a callback procedure on every bank-detail change, which costs nothing. Entity and account verification start paying for themselves as vendor volume and invoice size grow.
What's the free version of this?: The callback. Every request to change vendor banking details gets confirmed by phone, at a number you already had on file — never one provided in the email requesting the change. It's unglamorous, and it has the best fraud-stopped-per-dollar ratio of anything in this directory.