Supplier bills and approval controls

A supplier bill should be checked against what the company ordered and received before payment. Identify the supplier, invoice reference, amount and supporting delivery evidence. Build an approval route that catches unusual or duplicated items without making routine processing unnecessarily difficult.

Verify changes to bank details through an independent channel and restrict who can edit supplier records. Separate approval of a purchase from approval to pay an invoice if the delivery or price remains disputed. Keep a record of credits and unresolved queries.

Confirm the obligation before scheduling payment

Match the invoice to the supplier, order and evidence of delivery or service. Check quantity, price, period and the company being billed. A genuine supplier can still issue a duplicate or an invoice for the wrong entity. Keep the person approving the purchase distinct from the question of whether the invoiced goods or services were actually received as agreed.

Use a consistent invoice reference and duplicate check across email, scanning and manual entry. Suppliers sometimes resend the same document with a reminder, creating two records if the system treats every attachment as new. Record disputed amounts and missing delivery evidence clearly. Do not ignore the invoice entirely while it is queried, as the company still needs visibility of the possible obligation and payment timetable.

Protect changes to supplier details

Restrict who can create suppliers and amend payment information. Verify an unexpected bank detail change through an independent trusted contact route, not the telephone number supplied in the suspicious message. Keep a record of the check and approval. A familiar email thread can be compromised, so apparent continuity of correspondence is not sufficient evidence that new payment instructions are genuine.

The NCSC's small organisation guidance provides a starting point for recognising cyber attacks and protecting business accounts. ^[1] Apply those principles to the invoice process with practical staff instructions. If a payment request is urgent or asks staff to bypass ordinary checks, escalate it rather than treating urgency as a reason to remove verification. Preserve evidence if fraud is suspected.

Separate accounting entry, approval and cash release

Record the liability in the appropriate period using reliable evidence and the accountant's guidance where needed. Approval to recognise a bill is not necessarily approval to pay a disputed amount. Similarly, a payment schedule should not determine whether an expense belongs to the current period. Keep these decisions connected but distinct so the books reflect the obligation while the business manages commercial queries.

Use appropriate authorisation limits and an additional check for unusual or connected payments. In a small team, full separation may be impractical, but a director can review exceptions and bank releases. Avoid a workflow where one person can change the supplier account, approve an invoice and release a large payment without any independent visibility.

Reconcile credits, statements and payments

Match payments to the intended invoices and retain remittance details. Check supplier statements for missing bills and credits, while recognising that a statement is not always a substitute for the underlying invoice. Investigate old balances and amounts paid on account. A credit note left unallocated can lead the company to overpay later invoices or misstate the supplier liability.

Use Reconciling a business bank account to connect outgoing payments with the bank reconciliation and Keeping evidence of business expenses for supporting expense evidence. Keep the reason for write-offs or adjustments. Do not remove an old supplier balance merely because no reminder has arrived; establish whether it was paid, credited, disputed or remains owed. The company record guidance provides the wider basis for retaining reliable expenditure and debt records. ^[2]

For Limited company bookkeeping, provide the supplier ledger, approval process and unresolved invoices. Ask for a practical routine covering receipt, verification, posting, payment and reconciliation. Assign ownership of disputes and bank-detail checks, with a clear escalation route. Review recurring errors to improve the process at source, such as duplicate inbox forwarding or missing purchase references, rather than repeatedly correcting the same mistakes during year-end preparation.

Resolve a disputed invoice before the payment run

Record the disputed amount, the reason and the person dealing with the supplier. Keep the original invoice visible in the system with an appropriate status rather than deleting it because payment has been paused. Decide who can approve any undisputed part and how a later credit or replacement invoice will be matched.

Before releasing the payment run, check that the dispute status and approval evidence remain current. A supplier statement or automated reminder should not override an unresolved internal review. When the issue is settled, retain the agreement and reconcile the final payment. This makes the ledger useful to both finance and operations, while avoiding duplicate payment when a corrected invoice arrives with a different reference.

Illustrative scenario

A familiar supplier emails new bank details shortly before a large payment. The finance team uses its established contact route to verify the change rather than replying to the same email. The approval and verification evidence are kept with the payment, reducing reliance on the invoice's familiar appearance.

Preparation checklist

• Match the bill to the order and delivery evidence.
• Check duplicates and outstanding credits.
• Verify supplier details and material changes independently.
• Keep approval, payment and reconciliation records together.