Printable checklist
Supplier bank detail change: call-back checklist
One page you can print or laminate by the payment desk. Email or PDF alone is never enough.
Before any new bank details are accepted
- Email or PDF alone is never enough
- Call back on a number already on file (not from the new message)
- Confirm sort code, account number, and account name with a named person
- Second person reviews changes above your threshold
- Write who verified, date, and time
- Update the accounting system only after verification
Every week for owners
- Spot-check one recent supplier payment against the last known good details
- Ask finance: any bank-detail change requests this week?
- Confirm leavers no longer approve payments or hold the company banking login
- Confirm MFA is on for accounts and owner mailboxes
If you think you already paid the wrong account
- Contact your bank immediately and ask about recall / APP fraud processes
- Report it to Report Fraud (England, Wales and Northern Ireland) or Police Scotland on 101
- Tell the real supplier so they stop chasing a payment you already sent elsewhere
- Preserve the emails and invoice PDFs; do not delete the thread
- Reset passwords and check mailbox forwarding rules if your own email may be involved
- Follow the phishing first-hour steps if a click or suspicious login started this
- Tell your insurer if you have cyber or crime cover; follow their notification rules
Free to print and share. If you share it online, please link to this page. From OwnerSec (ownersec.co.uk). Not NCSC, legal or insurance advice.
From the guide: Invoice fraud and change of bank details. Checked 10 November 2026.