Guides
Part of Bank transfer guide: ACH, wire, instant payment, and internal transfer rails
Bank transfer controls for paying a supplier, step by step
Bank transfer controls for paying a supplier: write the payment line, verify changed details by phone, test, split roles and reconcile before closing out.
What to take away
- A supplier payment starts with one written linewho, how much, by when and who signs off.
- Pick the rail from that line, then price the whole route, not only the sender fee.
- Take bank details from a vendor master record, never from an invoice email.
- Verify any new or changed detail by calling a number you already had.
- Test, split the roles, check the final screen against the record, and close the invoice only after the recipient confirms.
A supplier payment by bank transfer passes through several hands: one person enters the details, another approves, another releases. Each handoff needs a control, from the first written line to the closed invoice.
Write the payment line before you open the app
Write one line before you open the app. It fixes the deadline, the currency, the evidence you need and who signs off.
Pay verified supplier North Shore Parts $7,850 in U.S. dollars by 3 p.m. Eastern on September 24, with dual approval and a recipient-bank confirmation.
Everything after it is a comparison against a stated requirement instead of a feeling about speed. A supplier invoice, a payroll run and a home closing are different jobs, and they do not want the same rail.
Let the line choose the rail
Ask which rail is actually underneath each menu label. A bank's menu may offer several payment types:
Payment Rails Compared
ACH
- Cutoff
- Batch deadline
- Fee
- Low
- Recovery
- Return rules
- Settlement
- Next day
Wire
- Cutoff
- Bank cutoff
- Fee
- High
- Recovery
- Recall difficult
- Settlement
- Same day
Instant
- Cutoff
- 24/7
- Fee
- Low
- Recovery
- Irrevocable
- Settlement
- Seconds
Card Payout
- Cutoff
- Provider cutoff
- Fee
- Varies
- Recovery
- Chargeback
- Settlement
- Days
The CFPB's ACH transaction explanation describes ACH as an electronic transfer between banks and credit unions, and notes that what the customer sees as completion can lag the network's own clearing. Hold that distinction when a provider advertises same-day service.
Same-day ACH has a submission cutoff, and missing it moves the payment to the next banking day. Nacha sets three same-day ACH submission deadlines: 10:30 a.m., 2:45 p.m. and 4:45 p.m. Eastern. Settlement follows later the same day.
Confirm the bank's own cutoff before you rely on a late afternoon deadline. If both accounts sit at one institution, an internal transfer may clear the requirement without leaving the building.
Then put six questions to the route. Which rail carries the payment? Does the recipient's bank accept it? When does the provider submit it, and when does interbank settlement happen? When can the recipient spend it, and can it be returned or recalled? An app's estimated arrival is not a guarantee unless the terms say it is.
Route Comparison Questions
- Which rail carries the payment?
- Does the recipient's bank accept it?
- When does the provider submit it?
- When does interbank settlement happen?
- When can the recipient spend it?
- Can it be returned or recalled?
Price the whole route
A low fee is expensive when the route misses payroll or a contractual date, and a high direct fee can be the cheap option for a payment that cannot slip. Price every row before you choose.
Cost / Where to find it
- Sender fee
- Your bank's published fee schedule
- Receiver fee
- The recipient's bank
- Intermediary fee
- Your bank, when the wire needs intermediary details
- Expedited fee
- The fee schedule, for faster handling
- Exchange-rate markup
- The provider, quoted in basis points
- Return or research fee
- The fee schedule
- Lost discount or late charge if delayed
- The supplier's terms
Typical U.S. prices, before any relationship discount, are $15 to $35 for an outgoing domestic wire, $0 to $3 for a standard ACH credit, and a currency markup of 1% to 3% over the mid-market rate on an international remittance.
Expedited handling, intermediary banks and the receiving bank's own fee can add to the total. Ask for the published fee schedule and the markup in basis points, because many app screens show only the sender fee.
Total Route Cost Checklist
- Sender fee
- Receiver fee
- Intermediary fee
- Expedited fee
- Exchange-rate markup
- Return or research fee
- Lost discount or late charge
Take the details from a known source
Get instructions from a person you can identify and who is authorized to give them. For a business, keep a vendor master record instead of copying details out of each invoice email, which is where payment-redirection fraud lands.
The record holds the recipient's legal name, the account name, the bank name and location, the routing or institution identifier, the account number and the account type where required. Some wires need intermediary details, and a payment reference and a contact are also useful.
Recipient Detail Fields
- Recipient's legal name
- Account name
- Bank name and location
- Routing or institution identifier
- Account number
- Account type where required
- Intermediary details for some wires
- Payment reference and contact
Never infer a routing number from a bank name, and never reuse an old instruction after a merger without confirming it.
Verify every change through a second channel
Call the recipient at a number already on file or found from a trusted source. Do not call the number printed in the message that changed the instructions.
Second-Channel Verification Steps
- Call recipient at a number already on file
- Read back legal name, bank, routing identifier
- Read back account last few digits
- Read back currency, amount, invoice, date
- Record who verified, when, and how
- Have a second person re-check high-value payments
The Internet Crime Complaint Center advises that you use secondary channels to verify requests for changes in account information. On the call, read back the legal name, the bank, the routing identifier and the last few digits of the account, then the currency, the amount and invoice, and the effective date. Record who verified it, when, and how.
For a high-value payment, have a second person run the same check independently. An emailed account change from a supplier is the case this check exists for:
- Look up the accounts payable contact's number in the vendor master, not in the email.
- Say you have a request to change their bank details, and ask them to confirm the bank name, the routing number and the last four digits.
- Compare what they read back with the routing number already on your record.
- If the contact reads back the number already on file, treat the email as a redirection attempt and do not release the payment.
- Log the date, the name of the person you spoke to and their answer.
Match the rail to the job
Release on the rail the payment line calls for, and not on the app's default. Each rail has a job it suits, and each runs under its own rulebook: ACH under the Nacha Operating Rules, and wire transfers under Article 4A of the Uniform Commercial Code.
- ACHfits payroll and vendor payments when the recipient accepts it and the timing works.
- Wirefits time-critical or high-value payments. Verify instructions before release, because recall is difficult.
- Instant paymentfits two reachable parties who need immediate availability and whose limits cover the amount.
- Internal transferfits two accounts at one provider. Check withdrawal restrictions and how the statement records it.
Match Rail to Payment Job
ACH
- Best for
- Payroll, bills
- Timing
- Batch
- Risk
- Return rules
- Check
- Recipient accepts
Wire
- Best for
- Time-critical
- Timing
- Same day
- Risk
- Recall difficult
- Check
- Verify instructions
Instant
- Best for
- Immediate
- Timing
- Seconds
- Risk
- Irrevocable
- Check
- Limits cover amount
Internal
- Best for
- Same provider
- Timing
- Ledger move
- Risk
- Withdrawal limits
- Check
- Statement records
Run a controlled test on a new recipient
For a new recurring recipient, send a small amount on the rail you intend to use and confirm receipt through the independent contact.
Controlled Test Steps
- Send a small amount on the intended rail
- Confirm receipt through independent contact
- Log test amount and sender confirmation
- Log trace or transaction ID
- Log recipient posted amount and descriptor
- Log send and receive times
Log the test amount, the sender confirmation and the trace or transaction ID, plus the amount the recipient posted, the descriptor they saw and the send and receive times.
A clean test confirms the rail works and that the money posts under the details you recorded. It does not prove the recipient account itself is uncompromised, and it does not authorize a later change.
Separate the roles on business payments
No single person should be able to both create a payee and release money to it.
Separate Payment Roles
- Person requesting the instruction
- Person verifying the recipient
- Person preparing the payment
- Person approving it
- Person reconciling it
Split five functions across different people:
- Set up or change the recipient record in the vendor master.
- Approve the payment against the written payment line.
- Release the payment to the rail.
- Reconcile the debit against the approval record.
- Review the exceptions each month.
For material transfers, require two approvals from different people before release. Neither approver should be the person who entered the bank details.
Require fresh approval if the amount, recipient, date, rail or bank details change. An urgent message from an executive is exactly the pressure a control exists to absorb. Treat a changed instruction as a new request, not an edit: void the old payment, run the second-channel check again, and log both versions.
Check the final screen, then reconcile
Compare the last screen to your record character by character. Check the source account, method, recipient and account suffix, then the bank, amount, currency, fee and delivery estimate. Pause if the app quietly changes the method or the date.
Save the confirmation and the trace reference. Ask the recipient to confirm the amount credited, not just that a notification arrived.
Reconcile the chain from the approved request to the bank instruction, the account debit, the rail status, the recipient confirmation and the closed invoice. If a link is missing, leave the payment open in your books.
When something goes wrong
For a wrong recipient, a suspected scam, a duplicate or a material delay, contact the provider immediately. Include the rail, amount, date, recipient, confirmation and the action you want. Preserve messages and approval records.
Do not send a replacement until the first payment's status is known. A delayed payment and a returned payment are different states, and treating one as the other is how people pay twice. If the provider does not resolve it, the CFPB and your state attorney general both take complaints; a licensed attorney can advise on your specific dispute.
Common questions
Who should enter the bank details?
Someone other than the approvers. Neither approver should be the person who entered the bank details, so that one person cannot create a payee and release money to it.
Does one test payment verify a vendor forever?
No. It is evidence for that one payment, not a standing authorization. Reverify any changed instruction through a channel you already trusted, and treat a sudden change of bank details as a reason to stop.
Can an urgent request skip the callback?
No. Require fresh approval whenever the details change. An urgent message from an executive is exactly the pressure the control exists to absorb.
What actually proves the recipient was paid?
The sender's rail reference plus confirmation from the recipient's own bank or account, matched back to the invoice. A notification email alone proves a message arrived, not that funds did.
