Vendor Master and Payment Detail Change Audit
Check controls for changing supplier bank details.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Review how supplier details are added or changed. The procedure, recent changes to bank details, and who verified them: [VENDOR_CHANGES]. Payment approvals: [APPROVALS]. Past payment errors or attempted fraud: [INCIDENTS]. Check verification by a known contact method, separation between the person who changes details and the person who pays, a record of requests, review of new suppliers, and alerts for changed details. Keep advice defensive. Return a table with Step, Control, Gap (red, amber, green) and Fix, a call-back verification script, and a quarterly review. Legal and insurance points are [VERIFY] for [JURISDICTION]. Also suggest how to train staff to recognise requests that create urgency or change bank details by email, and how to report suspected attempts to the right person. Then build a payment fraud defence process that a small team can follow. Write a procedure for new suppliers and changes to bank details: independent verification via a trusted phone number, a second approver, a waiting period for the first payment, and a record of who verified. Provide a call-back script, a checklist of red flags such as urgency, secrecy, a different email domain or a request to change details just before payment, and a message template for replying to a suspicious request. Define a response plan if a fraudulent payment is made: contact the bank immediately, document, notify the insurer and the authorities, and review controls. Add a training session outline with examples invented for the exercise, and a quarterly sample of supplier changes to confirm the procedure is followed. Keep the guidance defensive; legal and insurance duties are [VERIFY] for [JURISDICTION]. Use only the material I supply and never ask for real secrets, keys, account numbers or customer data. Replace any credential you see with a placeholder and tell me to rotate it if it was exposed. Close with a suggestion for who should review the fixes after they are made, and a checklist they can use to confirm the work was done properly.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.