Verify vendor bank changes before the next ACH.
BankChangeGuard turns a vendor's “we changed our bank” request into a structured callback verification. It confirms the change with the previously-verified contact and documents it in an exportable audit record, so your bookkeeper can review it before deciding whether to release, hold, or escalate the next ACH.
BankChangeGuard does not make payment-release decisions, guarantee fraud prevention, verify bank ownership independently, or provide legal, accounting, insurance, Nacha, or compliance advice.
Connecting, syncing vendors, and logging changes are free. The $99/month plan adds sending the verification emails. Not ready? Get product updates.
A vendor bank change is small until it becomes the payment you cannot get back.
According to the FBI IC3 2024 Internet Crime Report, reported business-email-compromise losses totaled $2.77 billion across 21,442 complaints in 2024 (an average of roughly $129,000 per reported incident). Vendor bank-change fraud is one common BEC pattern: a "our bank has changed" email that nobody verifies out-of-band.
Email callbacks get lost
A reply-to-the-vendor email goes through the same inbox the attacker just compromised. There's no out-of-band proof anyone actually verified the new account.
Screenshots aren't an audit trail
A phone-call note or a screen capture pasted into a QuickBooks vendor record is not the structured, timestamped evidence Nacha Phase 2 expects.
Vendor-master changes happen before payment
By the time the next Bill Pay run goes out, the bank account on file has already been swapped. The fraudulent ACH settles before anyone notices.
June 22 puts documented controls on the table
Nacha Phase 2 drops the volume threshold from Phase 1. Every ACH originator, whatever its size, needs risk-based fraud-monitoring controls.
The rule
The rule is now in effect. Most SMBs still have no documented control.
Since June 22, 2026, Nacha Phase 2 has removed the volume threshold that applied under Phase 1. The fraud-monitoring obligation now reaches every non-consumer ACH originator and the third parties that send on their behalf, whatever their size. The rules are technology-neutral: Nacha does not mandate a specific method or certify any tool, so each firm is expected to put a risk-based process in place and be able to show it has one.
How it works
Four steps. No new tools for your vendors. No ACH-rail integration.
- Step 1
Connect QuickBooks Online
Authorize QBO once through OAuth. Read-only on vendor and bill scopes. We don't touch your bank credentials and we don't originate ACH.
- Step 2
Log the change request
When a vendor emails or calls claiming new bank details, log it in BankChangeGuard: pick the vendor from your synced QuickBooks list and enter the new account's last 4. That starts the verification.
- Step 3
Verify with the previously-approved contact
A one-time code goes by email to the contact you verified before the change request, never the channel that asked for the change. Email callback is a workflow control, not independent bank-account ownership verification; for high-value or suspicious changes, add controls such as a known-number phone call or dual approval.
- Step 4
Export the audit record for review
Timestamps, channel, attestation text, and an evidence hash. Export a structured audit record for your internal review before you decide whether to release, hold, or escalate the payment.
Who this is for
Built for the bookkeeper, not the enterprise procurement team.
Many vendor-verification platforms (such as Trustpair, Eftsure, and PaymentWorks) are aimed at larger procurement and AP teams, and they are usually enterprise-tier and quote-based. Ramp ships AP Agents natively, but only to Ramp customers. BankChangeGuard is built for SMB bookkeepers and CPA firms using QuickBooks Online.
BankChangeGuard sits in the gap: a fractional bookkeeper or 3-to-25-person CPA firm running QuickBooks Online Bill Pay for their clients, who needs the same audit-evidence story at SMB pricing without booking a vendor demo.
Pricing
One seat. One QBO company. Flat.
- Bookkeeper-logged bank-change requests
- Callback verification (email)
- Exportable audit-record PDF
- QuickBooks Online OAuth integration
Connect QuickBooks Online first if you have not yet. Renews automatically at $99/month until you cancel; cancel anytime through the Polar customer portal linked from your dashboard, effective at the end of the current period. Payments, invoices, taxes, refunds, and chargebacks are handled by Polar as Merchant of Record. Xero and BILL integrations are planned after the QuickBooks launch.
FAQ
Questions a CPA partner will ask first.
Is BankChangeGuard a payment processor?
Does BankChangeGuard stop ACH payments automatically?
Does this replace my bank's Nacha compliance requirements?
Is BankChangeGuard officially Nacha-certified?
What vendor data do you store?
Can I use BankChangeGuard with multiple QBO clients?
Give every bank change a paper trail before payment leaves.
BankChangeGuard is live. Connect QuickBooks Online and subscribe from your dashboard when you're ready, or leave your email for occasional product updates. No spam, no roadmap newsletters.