A model can be argued with. An invoice carrying instructions aimed at whoever reads it is a real attack, and we test for exactly that. So nothing that decides whether money moves is a judgement call: reading is a language problem, scoring is an arithmetic one, and the two never touch. The same invoice returns the same number every time, and a person can check it by hand.
Every payment you have already made teaches it what normal looks like for that vendor: the bank details, the usual amount, the usual interval, the tax ID.
Routing change, account change, tax ID change, lookalike name, lookalike sender domain, unknown vendor, amount variance, velocity, duplicate, pressure language, threshold gaming.
A blurry scan is not a clean invoice, it is an unexamined one. If anything between the invoice and the payment went unchecked, the verdict is never a pass.
Crime and cyber policies do cover this fraud, right up to the failure to verify clause. Pay without independent verification and the cover is reduced or denied. So every check keeps a timestamped record of what was found, who was told, what they asked, and who released the money anyway. Entries are added. None is ever edited.
When a vendor's email is taken over, the thief opens an account in the vendor's own real name. It does belong to them. Ownership checks pass it. Your payment history does not, because the money still has to arrive somewhere the thief controls, and that is the one thing they cannot keep the same.
The standard control is a phone call to confirm a bank change. Voice cloning from three seconds of audio now costs under twenty dollars, and it is already inside this fraud. So when the verdict is a hold, Invoice Guard hands the caller questions drawn from the vendor's own history: things an attacker cannot know and the real vendor cannot get wrong.
of US organisations were hit by business email compromise in 2025.
AFP Payments Fraud and Control Survey, April 2026use any form of AI against payments fraud at all.
AFP Payments Fraud and Control Survey, April 2026average loss per incident. 86% moves by wire or ACH before anyone notices.
FBI IC3 Annual Report, 2025No account numbers are ever stored. Bank details are reduced to a fingerprint before anything is written down, and the invoice itself is never kept.