Accounts Payable Best Practices: Automation & Fraud Prevention
AP fraud costs businesses an average of $100,000 per incident — and most are preventable. Learn best practices for AP automation, three-way matching, vendor controls, and fraud prevention that protect your business and optimize cash flow.
Accounts payable is the gateway through which money leaves your business. Every payment passes through your AP process — which means every weakness in that process is a vulnerability to fraud, error, and cash flow inefficiency.
Yet AP is often treated as a back-office clerical function. The businesses that take AP seriously outperform peers in cost control, cash flow, and fraud resilience.
AP by the Numbers
The AP Process End-to-End
A well-documented AP process is the foundation of everything else. If your AP process isn't written down and followed consistently, controls and automation won't be effective.
Purchase Requisition
Department requests a purchase. All purchases start with a documented requisition — preventing unauthorized spending.
⚠ Risk: Bypassing this step is how unauthorized purchases happen
Purchase Order (PO) Creation
Finance or procurement issues a formal PO. The PO number becomes the reference point for the entire transaction.
⚠ Risk: No PO = no baseline for later matching
Goods/Services Receipt
The receiving department confirms delivery and quantity against the PO. This creates the Goods Receipt (GR) document.
⚠ Risk: Skipping this step is how overpayments and phantom deliveries occur
Invoice Receipt & Capture
Vendor invoice is received and captured into the AP system. AI-powered OCR can automate data extraction here.
⚠ Risk: Manual data entry creates errors and delays
Three-Way Matching
Invoice is matched against the PO and GR to verify quantities, prices, and terms. Discrepancies trigger a hold.
⚠ Risk: Failure to match is the #1 cause of AP fraud losses
Approval Routing
Approved invoices route to appropriate stakeholders based on amount, department, or vendor type.
⚠ Risk: Manual routing causes delays and approval bottlenecks
Payment Scheduling
Approved invoices are scheduled for payment on or just before due date to maximize DPO without incurring late fees.
⚠ Risk: Paying early loses float; paying late incurs penalties
Payment Execution
Payment is made via ACH, wire, check, or virtual card. Dual authorization controls apply above a threshold.
⚠ Risk: Single-person payment control is a major fraud vulnerability
Reconciliation
All payments are reconciled against bank statements and the general ledger. Vendor statements reconciled quarterly.
⚠ Risk: Failure to reconcile allows errors and fraud to hide indefinitely
Three-Way Matching: Your #1 AP Control
Three-way matching is the single most effective accounts payable control. It compares three documents that must agree before payment is authorized:
Purchase Order
What you agreed to buy — quantity, price, terms
Goods Receipt
What you actually received — verified by receiving department
Vendor Invoice
What the vendor is charging — must match PO and GR
When documents don't match:
- Price discrepancy: Hold invoice, contact vendor to issue credit note or corrected invoice
- Quantity discrepancy: Hold invoice, investigate with receiving team, request partial credit
- PO not found: Do not pay. Investigate source of invoice before any action
- Vendor not in system: Do not pay. Run vendor verification before setup
AP Fraud: Types & Prevention
Vendor Fraud
Fraudulent vendors set up in the system with invoices submitted for goods/services never delivered.
🚩 Red Flags:
- • New vendor with no verifiable business presence
- • Vendor address matches employee address
- • Invoices for unusually round amounts
✓ Prevention:
- Vendor verification process before setup
- Regular vendor master file audits
- Segregate vendor setup from payment approval
Invoice Fraud (External)
External fraudsters send fake invoices mimicking real vendors, or intercept invoice emails and change bank details.
🚩 Red Flags:
- • Payment details change request via email
- • Duplicate invoice numbers
- • Invoice domain slightly different from real vendor
✓ Prevention:
- Call vendor to verify bank detail changes (never reply to the email)
- Verify all new bank details via known phone numbers
- Enable dual approval for payment detail changes
Employee AP Fraud
Internal staff create fictitious vendors, split invoices to stay under approval thresholds, or approve payments to controlled accounts.
🚩 Red Flags:
- • Invoices just below approval thresholds (invoice splitting)
- • Payments to vendors with no business footprint
- • Same employee consistently approving own expenses
✓ Prevention:
- Segregation of duties (approver ≠ payer ≠ record-keeper)
- Regular AP audits by someone outside the AP team
- Automated duplicate detection
Check Fraud
Physical checks intercepted, altered, or duplicated. Still the highest-fraud payment method.
🚩 Red Flags:
- • Checks clearing to unfamiliar payees
- • Duplicate check numbers
- • Checks cashing to different account than payee
✓ Prevention:
- Switch from checks to ACH/virtual cards
- Positive Pay with your bank
- Regular check register reconciliation
AP Automation: What to Automate
AP automation doesn't just save time — it reduces fraud risk, eliminates errors, and frees your team for higher-value work.
Invoice Capture & Data Extraction
Tool: OCR + AI (Vic.ai, Stampli, SAP Concur)
AI reads invoice PDFs and emails, extracts vendor, amount, date, line items, and PO reference automatically.
Three-Way Matching
Tool: Built into AP software + ERP
Software automatically matches invoice to PO and GR. Only exceptions need human review.
Approval Routing
Tool: Workflow tools (Bill.com, Stampli, SAP)
Rule-based routing sends invoices to the right approver automatically based on amount, vendor, or department.
Duplicate Detection
Tool: Built into all major AP platforms
AI flags invoices with matching vendor + amount + date combinations before payment.
Payment Scheduling
Tool: AP automation + banking integration
System automatically schedules payments to maximize DPO without triggering late fees.
Vendor Communication
Tool: Vendor portals (Ariba, Coupa, Bill.com)
Vendors check invoice status, submit invoices, and update banking details via self-service portal.
Vendor Management Best Practices
Vendor Onboarding
- Require W-9 (US) or equivalent tax documentation
- Verify business registration and banking details independently
- Separate vendor setup from invoice approval roles
- Set up in accounting system only after full verification
- Document who approved each vendor and when
Vendor Master Maintenance
- Audit vendor master list at least annually
- Deactivate vendors with no activity for 12+ months
- Verify bank detail change requests via known phone number — never email
- Check for duplicate vendors (same ABN/EIN with different names)
- Review all employee-owned vendor registrations
Vendor Performance
- Reconcile vendor statements quarterly
- Track and dispute pricing errors immediately
- Monitor invoice cycle time by vendor
- Flag vendors with unusually high error or dispute rates
- Build preferred vendor lists for key categories
Strategic Vendor Relations
- Negotiate payment terms upfront — ask for Net 45 or Net 60
- Ask for early payment discount terms (2/10 Net 30)
- Consolidate vendors where possible for better terms
- Review contract pricing annually
- Maintain backup vendors for critical suppliers
Payment Optimization
When you pay is as important as what you pay. Strategic payment timing directly impacts your cash flow and working capital position.
Pay on the due date, not early
High ImpactUnless you're capturing an early payment discount, paying before the due date depletes your cash unnecessarily.
Capture every early payment discount
Very High ImpactA 2/10 Net 30 discount represents a 36% annualized return. Automate your approval process to enable capture.
Move from checks to ACH or virtual cards
High ImpactChecks are the highest-fraud, lowest-rebate payment method. Virtual cards earn 1–2% rebates and have built-in controls.
Batch payments strategically
Medium ImpactRun payment batches on specific days (e.g., Tuesdays and Thursdays) to maintain control and visibility.
Require dual authorization above thresholds
Very High ImpactAny payment above a threshold (commonly $5,000–$25,000) should require two authorized signatories.
AP Metrics That Matter
| Metric | How to Calculate | Target | Note |
|---|---|---|---|
| Days Payable Outstanding (DPO) | (Accounts Payable / COGS) × Days | 45–60 days | Higher = better use of cash float |
| Cost Per Invoice Processed | Total AP Costs / Invoices Processed | < $5 per invoice | Industry avg: $8–$12; automated: $2–$4 |
| Invoice Processing Time | Days from receipt to payment approval | < 3 business days | Manual avg: 10–14 days |
| Error Rate | Invoices with errors / Total invoices | < 1% | Manual processes: 3–5% error rate |
| Early Payment Discount Capture | Discounts captured / Discounts available | > 80% | 2/10 Net 30 = 36% annualized ROI |
| Duplicate Payment Rate | Duplicate payments / Total payments | < 0.1% | 0.1–0.5% of invoices are duplicates industry-wide |
Costly AP Mistakes to Avoid
Paying invoices early
Losing cash float unnecessarily. Even 10 days early on $1M/month in payables is significant.
No vendor master cleanup
Duplicate vendors, outdated banking info, and compliance risk. Audit at least annually.
Approving invoices without POs
Opens door to unauthorized spending and makes three-way matching impossible.
Single person controlling AP end-to-end
The #1 setup for internal fraud. Requires detection controls when segregation isn't possible.
Not capturing early payment discounts
2/10 Net 30 discounts represent ~36% annualized return. Many businesses miss them due to slow approvals.
Ignoring vendor statement reconciliation
Missed credits, duplicate invoices, and pricing errors accumulate undetected.
When to Outsource AP
For many growing businesses, outsourcing AP management — combined with automation tools — is the most cost-effective path to strong AP controls and performance.
Your team is too small for proper segregation of duties
You process more than 100 invoices per month
AP errors, duplicate payments, or fraud have occurred
Your cost per invoice is above $8–$10
Month-end close is delayed by AP reconciliation
Your AP team spends more time on vendor calls than approvals
MZBPO Accounts Payable Services
Our outsourced AP team handles end-to-end accounts payable: invoice capture and coding, three-way matching, approval routing, payment scheduling, vendor management, and monthly reconciliation — using AI-powered tools that reduce cost per invoice by up to 70%.
Schedule a CallFrequently Asked Questions
What is accounts payable best practice for invoice approval?
Best practice is a documented approval matrix based on dollar thresholds and vendor type, with automated routing and dual approval for payments above $10,000. Approvers should not be the same person who set up the vendor or will make the payment.
How common is AP fraud?
According to the ACFE, billing schemes account for 27% of all occupational fraud cases, with a median loss of $100,000. AP fraud is one of the most common and preventable forms of financial crime.
What is three-way matching in accounts payable?
Three-way matching compares: (1) the Purchase Order (what you agreed to buy), (2) the Goods Receipt (what you actually received), and (3) the Vendor Invoice (what you're being asked to pay). All three must match within tolerance before an invoice is approved.
Should I outsource accounts payable?
Outsourcing AP makes sense when: you process more than 100 invoices/month, you lack segregation of duties, you've experienced AP errors or fraud, or your team spends more than 20% of time on AP tasks. Outsourced AP combined with automation can reduce costs by 50–70%.
What's the best software for AP automation?
Top options include Bill.com (best for SMBs), Stampli (best UX with AI), Vic.ai (highest automation rate), and SAP Concur or Coupa for enterprise. The best choice depends on your invoice volume, accounting software, and team size.
Related Articles
Cash Flow Management Guide for Growing Businesses
Master cash flow forecasting, gap analysis, and working capital optimization.
Xero vs QuickBooks vs Sage: Which Software in 2026?
Side-by-side comparison of the three most popular accounting platforms.
Internal Controls for Small Business
Essential controls every growing business needs to prevent fraud.