{"id":24450,"date":"2026-09-28T13:28:39","date_gmt":"2026-09-28T13:28:39","guid":{"rendered":"https:\/\/maspartner.com\/?post_type=publications&#038;p=24450"},"modified":"2026-09-28T14:14:37","modified_gmt":"2026-09-28T14:14:37","slug":"medius-invoice-matching-how-ap-teams-automate-po-invoice-and-receipt-matchingd-duplicate-24129","status":"publish","type":"publications","link":"https:\/\/maspartner.com\/en-us\/publications\/medius-invoice-matching-how-ap-teams-automate-po-invoice-and-receipt-matchingd-duplicate-24129\/","title":{"rendered":"Accounts Payable Fraud Prevention: How Businesses Can Protect Vendor Payments"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"24450\" class=\"elementor elementor-24450\">\n\t\t\t\t<div class=\"e-con-with-custom-width elementor-element elementor-element-075981e e-con-full sc_inner_width_1_1 e-flex sc_layouts_column_icons_position_left e-con e-parent\" data-id=\"075981e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d0a8121 sc_fly_static elementor-widget elementor-widget-html\" data-id=\"d0a8121\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t\t<!-- =========================================================\r\nMASPARTNER PUBLICATION HERO\r\nReplace the publication details for each new publication.\r\n========================================================= -->\r\n\r\n<section class=\"mas-publication-standalone-hero\">\r\n\r\n  <style>\r\n    .mas-publication-standalone-hero {\r\n      --mas-gold: #fabc17;\r\n      --mas-black: #000000;\r\n      --mas-white: #ffffff;\r\n      --mas-content-width: 1240px;\r\n      --mas-desktop-padding: 70px;\r\n\r\n      position: relative;\r\n      left: 50%;\r\n      width: 100vw;\r\n      max-width: 100vw;\r\n      margin-left: -50vw;\r\n      margin-right: -50vw;\r\n\r\n      background: var(--mas-black);\r\n      color: var(--mas-white);\r\n      border-top: 6px solid var(--mas-gold);\r\n\r\n      font-family: inherit;\r\n      box-sizing: border-box;\r\n      overflow: hidden;\r\n      z-index: 1;\r\n    }\r\n\r\n    .mas-publication-standalone-hero *,\r\n    .mas-publication-standalone-hero *::before,\r\n    .mas-publication-standalone-hero *::after {\r\n      box-sizing: border-box;\r\n    }\r\n\r\n    .mas-publication-standalone-hero-inner {\r\n      width: 100%;\r\n      max-width: var(--mas-content-width);\r\n      margin: 0 auto;\r\n      padding: 60px 70px 65px 70px;\r\n    }\r\n\r\n    .mas-publication-standalone-hero h1 {\r\n      width: 100%;\r\n      max-width: 1100px;\r\n      margin: 0 0 22px;\r\n      padding: 0;\r\n\r\n      color: var(--mas-white);\r\n      font-size: clamp(38px, 5vw, 62px);\r\n      font-weight: 800;\r\n      line-height: 1.06;\r\n      letter-spacing: -0.5px;\r\n    }\r\n\r\n    .mas-publication-standalone-subtitle {\r\n      width: 100%;\r\n      max-width: 1000px;\r\n      margin: 0 0 30px;\r\n      padding: 0;\r\n\r\n      color: var(--mas-gold);\r\n      font-size: clamp(19px, 2.4vw, 28px);\r\n      font-weight: 700;\r\n      line-height: 1.35;\r\n    }\r\n\r\n    .mas-publication-standalone-rule {\r\n      width: 100%;\r\n      max-width: 880px;\r\n      height: 4px;\r\n      margin: 0 0 34px;\r\n\r\n      background: var(--mas-gold);\r\n      border-radius: 2px;\r\n    }\r\n\r\n    \/* ---------- META ROW WITH SLASH DIVIDERS ---------- *\/\r\n    .mas-publication-standalone-meta {\r\n      display: flex;\r\n      align-items: flex-start;\r\n      gap: 0;\r\n      width: 100%;\r\n      max-width: 1080px;\r\n      flex-wrap: wrap;\r\n    }\r\n\r\n    .mas-publication-standalone-meta-item {\r\n      flex: 1 1 0;\r\n      min-width: 0;\r\n    }\r\n\r\n    .mas-publication-standalone-meta-divider {\r\n      flex: 0 0 1px;\r\n      align-self: stretch;\r\n      background: rgba(255,255,255,0.18);\r\n      margin: 0 30px;\r\n    }\r\n\r\n    .mas-publication-standalone-label {\r\n      margin: 0 0 6px;\r\n      padding: 0;\r\n\r\n      color: var(--mas-gold);\r\n      font-size: 12px;\r\n      font-weight: 800;\r\n      line-height: 1.4;\r\n      letter-spacing: 1.5px;\r\n      text-transform: uppercase;\r\n    }\r\n\r\n    .mas-publication-standalone-value {\r\n      margin: 0;\r\n      padding: 0;\r\n\r\n      color: #e0e0e3;\r\n      font-size: 15px;\r\n      line-height: 1.55;\r\n    }\r\n\r\n    .mas-publication-standalone-credit-name {\r\n      margin: 0 0 4px;\r\n      padding: 0;\r\n\r\n      color: var(--mas-white);\r\n      font-size: 22px;\r\n      font-weight: 800;\r\n      line-height: 1.3;\r\n    }\r\n\r\n    .mas-publication-standalone-credit-name a,\r\n    .mas-publication-standalone-credit-name a:link,\r\n    .mas-publication-standalone-credit-name a:visited {\r\n       color: var(--mas-white) !important;\r\n       text-decoration: none;\r\n       border: none;\r\n       outline: none;\r\n       transition: none;\r\n       position: relative;\r\n       z-index: 10;\r\n       pointer-events: auto;\r\n       cursor: pointer;\r\n    }\r\n\r\n    .mas-publication-standalone-credit-name a:hover,\r\n    .mas-publication-standalone-credit-name a:focus,\r\n    .mas-publication-standalone-credit-name a:active,\r\n    .mas-publication-standalone-credit-name a:visited:hover,\r\n    .mas-publication-standalone-credit-name a:visited:focus,\r\n    .mas-publication-standalone-credit-name a:visited:active {\r\n       color: var(--mas-gold) !important;\r\n       text-decoration: none;\r\n       border: none;\r\n       outline: none;\r\n    }\r\n\r\n    .mas-publication-standalone-credit-role {\r\n      margin: 0;\r\n      padding: 0;\r\n\r\n      color: #d0d0d4;\r\n      font-size: 15px;\r\n      line-height: 1.5;\r\n    }\r\n\r\n    \/* Inline research-by line: Name | Title | Email *\/\r\n    .mas-publication-standalone-credit-inline {\r\n      margin: 0;\r\n      padding: 0;\r\n      color: #d0d0d4;\r\n      font-size: 15px;\r\n      line-height: 1.55;\r\n      white-space: nowrap;\r\n    }\r\n\r\n    .mas-publication-inline-sep {\r\n      margin: 0 8px;\r\n      color: rgba(255,255,255,0.25);\r\n    }\r\n\r\n    .mas-publication-inline-link,\r\n    .mas-publication-inline-link:link,\r\n    .mas-publication-inline-link:visited {\r\n      color: #d0d0d4 !important;\r\n      text-decoration: none !important;\r\n      border: none;\r\n      outline: none;\r\n      position: relative;\r\n      z-index: 10;\r\n      pointer-events: auto;\r\n      cursor: pointer;\r\n    }\r\n\r\n    .mas-publication-inline-link:hover,\r\n    .mas-publication-inline-link:focus,\r\n    .mas-publication-inline-link:active,\r\n    .mas-publication-inline-link:visited:hover,\r\n    .mas-publication-inline-link:visited:focus,\r\n    .mas-publication-inline-link:visited:active {\r\n      color: var(--mas-gold) !important;\r\n      text-decoration: none !important;\r\n    }\r\n\r\n    \/* Tablet *\/\r\n    @media (max-width: 1024px) {\r\n      .mas-publication-standalone-hero {\r\n        --mas-desktop-padding: 30px;\r\n      }\r\n\r\n      .mas-publication-standalone-meta-divider {\r\n        margin: 0 18px;\r\n      }\r\n    }\r\n\r\n    \/* Mobile *\/\r\n    @media (max-width: 767px) {\r\n      .mas-publication-standalone-hero {\r\n        --mas-desktop-padding: 20px;\r\n      }\r\n\r\n      .mas-publication-standalone-hero-inner {\r\n        padding-top: 36px;\r\n        padding-bottom: 42px;\r\n      }\r\n\r\n      .mas-publication-standalone-hero h1 {\r\n        margin-bottom: 18px;\r\n        font-size: clamp(34px, 10vw, 42px);\r\n        line-height: 1.08;\r\n        letter-spacing: -0.3px;\r\n      }\r\n\r\n      .mas-publication-standalone-subtitle {\r\n        margin-bottom: 26px;\r\n        font-size: 20px;\r\n        line-height: 1.4;\r\n      }\r\n\r\n      .mas-publication-standalone-rule {\r\n        margin-bottom: 28px;\r\n      }\r\n\r\n      .mas-publication-standalone-meta {\r\n        flex-direction: column;\r\n        gap: 0;\r\n      }\r\n\r\n      .mas-publication-standalone-meta-item {\r\n        padding: 16px 0;\r\n        border-bottom: 1px solid rgba(255,255,255,0.12);\r\n      }\r\n\r\n      .mas-publication-standalone-meta-item:last-child {\r\n        border-bottom: none;\r\n      }\r\n\r\n      .mas-publication-standalone-meta-divider {\r\n        display: none;\r\n      }\r\n\r\n      .mas-publication-standalone-credit-name {\r\n        font-size: 20px;\r\n      }\r\n    }\r\n  <\/style>\r\n\r\n  <div class=\"mas-publication-standalone-hero-inner\">\r\n\r\n    <!-- MAIN TITLE -->\r\n    <h1>\r\n      Accounts Payable Fraud Prevention: How Businesses Can Protect Vendor Payments\r\n    <\/h1>\r\n\r\n    <!-- SUBTITLE \/ DESCRIPTION -->\r\n    <p class=\"mas-publication-standalone-subtitle\">\r\n      Understanding Vendor Fraud, Business Email Compromise, Invoice and Payment Controls, Segregation of Duties, and How to Build an AP Fraud Monitoring Framework\r\n    <\/p>\r\n\r\n    <!-- YELLOW DIVIDER -->\r\n    <div class=\"mas-publication-standalone-rule\"><\/div>\r\n\r\n    <!-- PUBLICATION DETAILS: Published | Audience | Research By -->\r\n    <div class=\"mas-publication-standalone-meta\">\r\n\r\n      <!-- PUBLISHED -->\r\n      <div class=\"mas-publication-standalone-meta-item\">\r\n        <p class=\"mas-publication-standalone-label\">Published<\/p>\r\n        <p class=\"mas-publication-standalone-value\">September 2026 | MASPARTNER E-Guides<\/p>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-standalone-meta-divider\"><\/div>\r\n\r\n      <!-- AUDIENCE -->\r\n      <div class=\"mas-publication-standalone-meta-item\">\r\n        <p class=\"mas-publication-standalone-label\">Audience<\/p>\r\n        <p class=\"mas-publication-standalone-value\">AP Fraud Prevention \u00b7 Vendor Payment Security \u00b7 Internal Controls \u00b7 Business Email Compromise<\/p>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-standalone-meta-divider\"><\/div>\r\n\r\n      <!-- RESEARCH BY -->\r\n      <div class=\"mas-publication-standalone-meta-item\">\r\n        <p class=\"mas-publication-standalone-label\">Research By<\/p>\r\n        <p class=\"mas-publication-standalone-credit-inline\">\r\n          <a href=\"https:\/\/maspartner.com\/en-us\/people\/rohit-kumar\/\" class=\"mas-publication-inline-link\">Rohit Kumar<\/a> <span class=\"mas-publication-inline-sep\">|<\/span> Director <span class=\"mas-publication-inline-sep\">|<\/span> <a href=\"mailto:rohit@maspartner.com\" class=\"mas-publication-inline-link\">rohit@maspartner.com<\/a>\r\n        <\/p>\r\n      <\/div>\r\n\r\n    <\/div>\r\n\r\n  <\/div>\r\n\r\n  <script>\r\n  (function(){\r\n    var hero = document.currentScript\r\n      ? document.currentScript.closest('.mas-publication-standalone-hero')\r\n      : null;\r\n    if(!hero){\r\n      var all = document.querySelectorAll('.mas-publication-standalone-hero');\r\n      hero = all[all.length - 1];\r\n    }\r\n    if(!hero) return;\r\n\r\n    hero.querySelectorAll('.mas-publication-standalone-credit-name a').forEach(function(el){\r\n      el.addEventListener('click', function(e){\r\n        e.stopPropagation();\r\n        var href = (this.getAttribute('href') || '').trim();\r\n        href = href.replace(\/^\\[+\/, '').replace(\/\\]+$\/, '').trim();\r\n        var isReal = \/^https?:\\\/\\\/\/i.test(href) || href.charAt(0) === '\/';\r\n        if(!isReal){ e.preventDefault(); return; }\r\n        e.preventDefault();\r\n        window.location.href = href;\r\n      }, true);\r\n    });\r\n\r\n    \/\/ Force inline research-by links (name + email) to work in Elementor\r\n    hero.querySelectorAll('.mas-publication-inline-link').forEach(function(el){\r\n      el.addEventListener('click', function(e){\r\n        e.stopPropagation();\r\n        var href = (this.getAttribute('href') || '').trim();\r\n        if(!href){ e.preventDefault(); return; }\r\n        e.preventDefault();\r\n        if(\/^mailto:\/i.test(href)){\r\n          window.location.href = href;\r\n        } else {\r\n          window.location.href = href;\r\n        }\r\n      }, true);\r\n    });\r\n  })();\r\n  <\/script>\r\n\r\n<\/section>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"e-con-with-custom-width elementor-element elementor-element-f4f913f e-con-full e-flex sc_layouts_column_icons_position_left e-con e-parent\" data-id=\"f4f913f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8870685 sc_fly_static elementor-widget elementor-widget-html\" data-id=\"8870685\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t\t<!--\r\n============================================================\r\n  MASPARTNER \/ MERCURIUS WEB PUBLICATION\r\n  Accounts Payable Fraud Prevention:\r\n  How Businesses Can Protect Vendor Payments\r\n  Understanding Vendor Fraud, Business Email Compromise, Invoice and\r\n  Payment Controls, Segregation of Duties, and How to Build an AP\r\n  Fraud Monitoring Framework\r\n  Paste this entire block into a WordPress \"Custom HTML\" block\r\n  (or an Elementor HTML widget) on a full-width page.\r\n============================================================\r\n  REPLACE THESE PLACEHOLDERS BEFORE PUBLISHING:\r\n  (Tip: use Find & Replace - image placeholders appear TWICE each,\r\n   once in the <a href> and once in the <img src>.)\r\n\r\n    IMAGES (upload to WordPress Media, paste the file URL):\r\n    [IMAGE_1_URL]   -> Section 1  - Vendor-to-Payment Lifecycle (6-step flow, PDF page 6)\r\n    [IMAGE_2_URL]   -> Section 3  - Red Flag -> Verification -> Investigation -> Conclusion flow (PDF page 11)\r\n    [IMAGE_3_URL]   -> Section 4  - Vendor Onboarding flow (Collect -> Activate, PDF page 12)\r\n    [IMAGE_4_URL]   -> Section 5  - Two-Way Matching diagram (PO <-> Invoice, PDF page 14)\r\n    [IMAGE_5_URL]   -> Section 5  - Three-Way Matching diagram (PO <-> Invoice <-> Goods Receipt, PDF page 15)\r\n    [IMAGE_6_URL]   -> Section 7  - Segregation of Duties stages flow (PDF page 18)\r\n    [IMAGE_7_URL]   -> Section 8  - Payment Prepared -> Reviewed -> Released flow (PDF page 19)\r\n    [IMAGE_8_URL]   -> Section 10 - AP Records <-> Bank Transactions <-> Approved Supplier List (PDF page 23)\r\n    [IMAGE_9_URL]   -> Section 10 - Vendor Statement vs. Internal Records diagram (PDF page 23)\r\n    [IMAGE_10_URL]  -> Section 11 - Low \/ Medium \/ High Risk levels graphic (PDF page 25)\r\n\r\n    NOTE ON IMAGES: until a real image URL is added, the page automatically\r\n    shows a built-in HTML version of the same diagram (no broken-image icons).\r\n    Once a real URL is added and the image loads, the image replaces the\r\n    HTML version automatically.\r\n\r\n    FRAUD REPORTING & PAYMENT SECURITY RESOURCES:\r\n    [IC3_BEC_URL]                 -> FBI Internet Crime Complaint Center (IC3): Report Business Email Compromise\r\n                                     (suggested: https:\/\/www.ic3.gov\/)\r\n    [CISA_GUIDANCE_URL]           -> CISA: Cybersecurity Guidance for Organizations\r\n                                     (suggested: https:\/\/www.cisa.gov\/)\r\n\r\n    FRAUD PREVENTION & INTERNAL CONTROL RESOURCES:\r\n    [ACFE_URL]                    -> ACFE: Association of Certified Fraud Examiners\r\n                                     (suggested: https:\/\/www.acfe.com\/)\r\n    [COSO_URL]                    -> COSO: Internal Control Frameworks and Guidance\r\n                                     (suggested: https:\/\/www.coso.org\/)\r\n\r\n    OFFICIAL IRS & GOVERNMENT RESOURCES:\r\n    [IRS_FORM_W9_URL]             -> IRS: About Form W-9, Request for Taxpayer Identification Number\r\n                                     (suggested: https:\/\/www.irs.gov\/forms-pubs\/about-form-w-9)\r\n    [IRS_RECORDKEEPING_URL]       -> IRS: Recordkeeping for Business Taxpayers\r\n                                     (suggested: https:\/\/www.irs.gov\/businesses\/small-businesses-self-employed\/recordkeeping)\r\n    [SBA_MANAGE_FINANCES_URL]     -> SBA: Manage Your Finances, Business Guide\r\n                                     (suggested: https:\/\/www.sba.gov\/business-guide\/manage-your-business\/manage-your-finances)\r\n\r\n    RELATED MASPARTNER RESOURCES:\r\n    [MASPARTNER_ARTICLE_1_URL]    -> MASPARTNER: Outsourced Accounting, Bookkeeping & Payroll\r\n\r\n    PDF DOWNLOAD LINK (delivered after CF7 form submission) - ALREADY SET:\r\n    https:\/\/maspartner.com\/wp-content\/uploads\/2026\/09\/Publications_Accounts_Payable_Fraud_Prevention.pdf.pdf\r\n\r\n    NOTE: The sticky button triggers a CF7 popup form.\r\n    CF7 Form ID: d62a501 (title: Publication)\r\n    User must add an Elementor \"Shortcode\" widget BELOW this Custom HTML\r\n    widget containing the CF7 shortcode:\r\n        [contact-form-7 id=\"d62a501\" title=\"Publication\"]\r\n    Optional (recommended if the page has other CF7 forms): in that\r\n    Shortcode widget go to Advanced > CSS Classes and add:\r\n        mas-publication-cf7-source\r\n    Safety net: if no CF7 form is found on the page, the sticky button\r\n    opens the PDF directly so it is never a dead button.\r\n============================================================\r\n-->\r\n\r\n<div class=\"mas-publication-wrapper\">\r\n\r\n  <style>\r\n    .mas-publication-wrapper{\r\n      --mas-white:#ffffff;\r\n      --mas-light-yellow:#ffdc74;\r\n      --mas-yellow:#ffd240;\r\n      --mas-gold:#fabc17;\r\n      --mas-dark-gold:#cfa434;\r\n      --mas-black:#000000;\r\n      --mas-ink:#16161a;\r\n      --mas-muted:#55555c;\r\n      --mas-line:#e7e7e7;\r\n      --mas-soft:#fbf7ec;\r\n      --mas-maxw:1240px;\r\n      --mas-pad:40px;\r\n      font-family:inherit;\r\n      color:var(--mas-ink);\r\n      line-height:1.7;\r\n      box-sizing:border-box;\r\n      width:100%;\r\n      overflow-x:clip;\r\n    }\r\n    .mas-publication-wrapper *,\r\n    .mas-publication-wrapper *::before,\r\n    .mas-publication-wrapper *::after{box-sizing:border-box;}\r\n\r\n    \/* ---------- BODY ---------- *\/\r\n    .mas-publication-body{\r\n      max-width:var(--mas-maxw);margin:0 auto;padding:0 var(--mas-pad);\r\n    }\r\n    .mas-publication-details{\r\n      padding:44px 0 12px;border-bottom:1px solid var(--mas-line);\r\n    }\r\n    .mas-publication-block-label{\r\n      font-size:11px;font-weight:800;letter-spacing:1.5px;\r\n      color:var(--mas-dark-gold);text-transform:uppercase;margin:26px 0 8px;\r\n    }\r\n    .mas-publication-details p{margin:0 0 14px;font-size:15px;}\r\n    .mas-publication-disclaimer{\r\n      font-size:13px;color:var(--mas-muted);\r\n      background:#fffbe8;border-left:4px solid var(--mas-gold);\r\n      padding:14px 18px;border-radius:0 8px 8px 0;\r\n    }\r\n\r\n    \/* ---------- TABLE OF CONTENTS ---------- *\/\r\n    .mas-publication-toc{\r\n      background:var(--mas-soft);\r\n      border:1px solid #f0e6c8;\r\n      border-radius:10px;\r\n      padding:28px 30px;\r\n      margin:38px 0;\r\n    }\r\n    .mas-publication-toc h2{\r\n      font-size:22px;font-weight:800;margin:0 0 18px;color:var(--mas-ink);\r\n      padding-bottom:12px;border-bottom:3px solid var(--mas-gold);\r\n    }\r\n    .mas-publication-toc ol{margin:0;padding:0;list-style:none;counter-reset:toc;}\r\n    .mas-publication-toc li{\r\n      counter-increment:toc;border-bottom:1px solid #efe7cf;\r\n    }\r\n    .mas-publication-toc li:last-child{border-bottom:none;}\r\n    .mas-publication-toc a{\r\n      display:flex;align-items:baseline;gap:12px;\r\n      padding:11px 4px;text-decoration:none;color:var(--mas-ink);\r\n      font-size:15px;font-weight:600;transition:color .15s;\r\n    }\r\n    .mas-publication-toc a:hover,\r\n    .mas-publication-toc a.mas-toc-active{color:var(--mas-dark-gold);}\r\n    .mas-publication-toc a::before{\r\n      content:counter(toc, decimal-leading-zero);\r\n      color:var(--mas-dark-gold);font-weight:800;font-size:13px;\r\n      min-width:26px;flex:0 0 auto;\r\n    }\r\n    .mas-publication-toc li.mas-publication-toc-plain{counter-increment:none;}\r\n    .mas-publication-toc li.mas-publication-toc-plain a::before{\r\n      content:\"\\2014\";min-width:26px;text-align:center;font-size:14px;\r\n    }\r\n\r\n    \/* ---------- SECTIONS ---------- *\/\r\n    .mas-publication-section{\r\n      padding:40px 0 6px;scroll-margin-top:80px;\r\n    }\r\n    .mas-publication-section-head{\r\n      display:flex;align-items:center;gap:14px;margin:0 0 22px;\r\n      padding-bottom:14px;border-bottom:3px solid var(--mas-gold);\r\n    }\r\n    .mas-publication-num{\r\n      flex:0 0 auto;width:38px;height:38px;border-radius:7px;\r\n      background:var(--mas-gold);color:var(--mas-black);\r\n      font-weight:800;font-size:18px;display:flex;\r\n      align-items:center;justify-content:center;\r\n    }\r\n    .mas-publication-section-head h2{\r\n      font-size:clamp(22px,3.4vw,30px);font-weight:800;margin:0;\r\n      color:var(--mas-ink);line-height:1.2;\r\n    }\r\n    .mas-publication-eyebrow{\r\n      font-size:11px;font-weight:800;letter-spacing:2px;\r\n      color:var(--mas-dark-gold);text-transform:uppercase;margin:0 0 4px;\r\n    }\r\n    .mas-publication-section h3{\r\n      font-size:19px;font-weight:800;margin:30px 0 10px;color:var(--mas-ink);\r\n    }\r\n    .mas-publication-section h4{\r\n      font-size:16px;font-weight:800;margin:22px 0 8px;color:var(--mas-ink);\r\n    }\r\n    .mas-publication-section p{margin:0 0 16px;font-size:16px;}\r\n    .mas-publication-section ul{margin:0 0 18px;padding-left:22px;}\r\n    .mas-publication-section ul li{margin:0 0 8px;font-size:16px;}\r\n\r\n    \/* two-column bullet list (mirrors the two-column lists in the PDF) *\/\r\n    .mas-publication-section ul.mas-publication-list-2col{\r\n      columns:2;column-gap:44px;\r\n    }\r\n    .mas-publication-list-2col li{break-inside:avoid;}\r\n\r\n    \/* ---------- FRAUD TYPE HEADINGS ---------- *\/\r\n    .mas-publication-section h3.mas-publication-type-head{\r\n      display:flex;align-items:center;gap:14px;flex-wrap:wrap;\r\n      background:#fffbe8;border-left:5px solid var(--mas-gold);\r\n      border-radius:0 8px 8px 0;padding:12px 18px;margin:34px 0 14px;\r\n    }\r\n    .mas-publication-type-label{\r\n      flex:0 0 auto;background:var(--mas-gold);color:var(--mas-black);\r\n      font-size:11px;font-weight:800;letter-spacing:1.2px;\r\n      text-transform:uppercase;padding:4px 10px;border-radius:4px;\r\n    }\r\n\r\n    \/* ---------- CALLOUT BOXES ---------- *\/\r\n    .mas-publication-statbox{\r\n      background:#fffbe8;border:1px solid #f0e6c8;\r\n      border-left:5px solid var(--mas-gold);border-radius:8px;\r\n      padding:22px 26px;margin:24px 0 30px;\r\n    }\r\n    .mas-publication-statbox .mas-publication-box-title{\r\n      font-size:12px;font-weight:800;letter-spacing:1.5px;\r\n      color:var(--mas-dark-gold);text-transform:uppercase;margin:0 0 12px;\r\n    }\r\n    .mas-publication-statbox p{margin:0;font-size:15px;}\r\n    .mas-publication-statbox p + p{margin-top:12px;}\r\n    .mas-publication-section .mas-publication-statbox .mas-publication-box-title{margin:0 0 12px;font-size:12px;}\r\n    .mas-publication-statbox ul{margin:0;padding-left:20px;}\r\n    .mas-publication-statbox li{margin:0 0 9px;font-size:15px;}\r\n    .mas-publication-statbox li:last-child{margin-bottom:0;}\r\n\r\n    .mas-publication-example{\r\n      border-left:3px solid var(--mas-gold);background:transparent;\r\n      padding:6px 0 6px 22px;margin:22px 0 28px;\r\n    }\r\n    .mas-publication-example .mas-publication-box-title{\r\n      font-size:12px;font-weight:800;letter-spacing:1.5px;\r\n      color:var(--mas-dark-gold);text-transform:uppercase;margin:0 0 8px;\r\n    }\r\n    .mas-publication-section .mas-publication-example p{margin:0;font-size:15px;color:#3a3a40;}\r\n    .mas-publication-section .mas-publication-example .mas-publication-box-title{margin:0 0 8px;font-size:12px;color:var(--mas-dark-gold);}\r\n\r\n    .mas-publication-warning{\r\n      background:#fffbe8;border:2px solid var(--mas-gold);\r\n      border-radius:6px;\r\n      padding:22px 26px;margin:26px 0 30px;\r\n    }\r\n    .mas-publication-warning .mas-publication-box-title{\r\n      font-size:13px;font-weight:800;letter-spacing:1px;\r\n      color:var(--mas-black);text-transform:uppercase;margin:0 0 12px;\r\n    }\r\n    .mas-publication-section .mas-publication-warning p{margin:0;font-size:15px;color:#222;}\r\n    .mas-publication-section .mas-publication-warning p + p{margin-top:12px;}\r\n    .mas-publication-section .mas-publication-warning p + ul{margin-top:12px;}\r\n    .mas-publication-section .mas-publication-warning .mas-publication-box-title{margin:0 0 12px;}\r\n    .mas-publication-warning ul{margin:0;padding-left:20px;}\r\n    .mas-publication-section .mas-publication-warning li{margin:0 0 10px;font-size:15px;color:#222;}\r\n    .mas-publication-warning li:last-child{margin-bottom:0;}\r\n\r\n    \/* ---------- STEP ROWS ---------- *\/\r\n    .mas-publication-steps{margin:22px 0 30px;display:grid;gap:12px;}\r\n    .mas-publication-step{\r\n      display:flex;align-items:stretch;gap:0;\r\n      border:1px solid var(--mas-line);border-radius:8px;overflow:hidden;\r\n      background:#fff;\r\n    }\r\n    .mas-publication-step-label{\r\n      flex:0 0 auto;min-width:112px;\r\n      background:var(--mas-dark-gold);color:#fff;\r\n      font-size:11px;font-weight:800;letter-spacing:1.2px;\r\n      text-transform:uppercase;\r\n      display:flex;align-items:center;justify-content:center;\r\n      padding:14px 12px;text-align:center;\r\n    }\r\n    .mas-publication-step-text{\r\n      padding:14px 18px;font-size:15px;color:#39393f;\r\n      display:flex;flex-direction:column;justify-content:center;\r\n    }\r\n    .mas-publication-step-text strong{color:var(--mas-ink);font-size:15px;}\r\n\r\n    \/* ---------- FLOW CHAIN ---------- *\/\r\n    .mas-publication-flow{\r\n      display:flex;flex-wrap:wrap;align-items:stretch;gap:10px;\r\n      margin:24px 0 30px;\r\n    }\r\n    .mas-publication-flow-item{\r\n      flex:1 1 180px;background:var(--mas-gold);color:var(--mas-black);\r\n      border-radius:8px;padding:16px 14px;\r\n      font-size:13px;font-weight:800;line-height:1.4;text-align:center;\r\n      display:flex;align-items:center;justify-content:center;\r\n    }\r\n    .mas-publication-flow-compact .mas-publication-flow-item{flex:1 1 120px;}\r\n    .mas-publication-flow-arrow{\r\n      flex:0 0 auto;display:flex;align-items:center;justify-content:center;\r\n      font-size:20px;font-weight:800;color:var(--mas-dark-gold);\r\n    }\r\n\r\n    \/* converging diagram (vendor statement review) *\/\r\n    .mas-publication-converge{\r\n      display:grid;grid-template-columns:minmax(0,1fr) auto minmax(0,1fr);\r\n      gap:18px;align-items:center;margin:24px 0 30px;\r\n    }\r\n    .mas-publication-converge ul{\r\n      list-style:none;margin:0;padding:0;display:grid;gap:8px;\r\n    }\r\n    .mas-publication-section .mas-publication-converge li{\r\n      margin:0;background:var(--mas-gold);color:var(--mas-black);\r\n      border-radius:6px;padding:10px 16px;font-size:14px;font-weight:700;\r\n    }\r\n    .mas-publication-converge-arrow{\r\n      font-size:26px;font-weight:800;color:var(--mas-dark-gold);text-align:center;\r\n    }\r\n    .mas-publication-converge-result{\r\n      background:var(--mas-gold);color:var(--mas-black);border-radius:8px;\r\n      padding:26px 20px;text-align:center;font-size:17px;font-weight:800;line-height:1.4;\r\n    }\r\n\r\n    \/* ---------- IMAGE WITH HTML FALLBACK ---------- *\/\r\n    .mas-publication-figure{display:none;margin:24px 0 30px;}\r\n    .mas-publication-figure a{display:block;line-height:0;}\r\n    .mas-publication-figure img{\r\n      display:block;width:100%;max-width:100%;height:auto;\r\n      border-radius:8px;border:1px solid var(--mas-line);\r\n    }\r\n    .mas-publication-visual.mas-img-ok .mas-publication-figure{display:block;}\r\n    .mas-publication-visual.mas-img-ok .mas-publication-visual-fallback{display:none;}\r\n\r\n    \/* ---------- CARD GRID (warning-sign categories) ---------- *\/\r\n    .mas-publication-cards{\r\n      display:grid;grid-template-columns:repeat(2,minmax(0,1fr));\r\n      gap:14px;margin:24px 0 30px;\r\n    }\r\n    .mas-publication-card{\r\n      background:#f7f7f7;border-left:5px solid var(--mas-gold);\r\n      border-radius:0 8px 8px 0;padding:18px 22px;\r\n    }\r\n    .mas-publication-section .mas-publication-card h4{margin:0 0 10px;font-size:16px;}\r\n    .mas-publication-section .mas-publication-card ul{margin:0;padding-left:18px;}\r\n    .mas-publication-section .mas-publication-card li{font-size:15px;margin:0 0 6px;}\r\n\r\n    \/* ---------- RISK LEVELS ---------- *\/\r\n    .mas-publication-risk-scale{\r\n      display:flex;align-items:center;gap:12px;margin:24px 0 12px;\r\n      font-size:11px;font-weight:800;letter-spacing:1.5px;\r\n      text-transform:uppercase;color:var(--mas-muted);\r\n    }\r\n    .mas-publication-risk-scale::before,\r\n    .mas-publication-risk-scale::after{\r\n      content:\"\";flex:1 1 auto;height:2px;background:var(--mas-muted);\r\n    }\r\n    .mas-publication-risk-scale::after{\r\n      background:linear-gradient(90deg,var(--mas-muted) 96%,transparent 96%);\r\n    }\r\n    .mas-publication-risk-grid{\r\n      display:grid;grid-template-columns:repeat(3,minmax(0,1fr));\r\n      gap:12px;margin:0 0 30px;\r\n    }\r\n    .mas-publication-risk-col{background:#f7f7f7;border-radius:8px;overflow:hidden;}\r\n    .mas-publication-risk-head{\r\n      background:var(--mas-gold);color:var(--mas-black);text-align:center;\r\n      font-weight:800;font-size:16px;letter-spacing:.5px;padding:14px 12px;\r\n    }\r\n    .mas-publication-risk-body{padding:16px 18px;}\r\n    .mas-publication-risk-label{\r\n      font-size:11px;font-weight:800;letter-spacing:1.2px;\r\n      text-transform:uppercase;color:var(--mas-dark-gold);margin:0 0 4px;\r\n    }\r\n    .mas-publication-section .mas-publication-risk-body p{font-size:14px;margin:0 0 14px;}\r\n    .mas-publication-section .mas-publication-risk-body p:last-child{margin-bottom:0;}\r\n    .mas-publication-risk-body p.mas-publication-risk-label{font-size:11px;margin:0 0 4px;}\r\n    .mas-publication-risk-divider{border:0;border-top:1px solid #dedede;margin:0 0 14px;}\r\n\r\n    \/* ---------- TABLES ---------- *\/\r\n    .mas-publication-table-scroll{\r\n      overflow-x:auto;margin:22px 0 30px;\r\n      -webkit-overflow-scrolling:touch;\r\n    }\r\n    .mas-publication-table{\r\n      width:100%;border-collapse:collapse;min-width:520px;font-size:15px;\r\n    }\r\n    .mas-publication-table th{\r\n      background:var(--mas-gold);color:var(--mas-black);\r\n      text-align:left;padding:13px 16px;font-weight:800;font-size:14px;\r\n    }\r\n    .mas-publication-table td{\r\n      padding:13px 16px;border-bottom:1px solid var(--mas-line);\r\n      vertical-align:top;color:#39393f;\r\n    }\r\n    .mas-publication-table tr:nth-child(even) td{background:#fdfbf3;}\r\n    .mas-publication-table tr.mas-publication-row-strong td{font-weight:700;color:var(--mas-ink);}\r\n\r\n    \/* ---------- CHECKLIST (static design only) ---------- *\/\r\n    .mas-publication-checklist{list-style:none;margin:18px 0 30px;padding:0;}\r\n    .mas-publication-section ul.mas-publication-checklist{padding-left:0;}\r\n    .mas-publication-checklist li{\r\n      position:relative;padding:11px 0 11px 34px;\r\n      border-bottom:1px solid var(--mas-line);font-size:15px;\r\n      cursor:default;\r\n    }\r\n    .mas-publication-section .mas-publication-checklist li{margin:0;font-size:15px;}\r\n    .mas-publication-checklist li::before{\r\n      content:\"\";position:absolute;left:0;top:14px;\r\n      width:20px;height:20px;border:2px solid var(--mas-gold);\r\n      border-radius:3px;background:var(--mas-white);\r\n      cursor:default;pointer-events:none;\r\n    }\r\n    .mas-publication-checklist-grid{\r\n      display:grid;grid-template-columns:repeat(2,minmax(0,1fr));\r\n      gap:18px 22px;margin:24px 0 30px;align-items:start;\r\n    }\r\n    .mas-publication-checklist-group{\r\n      border:1px solid var(--mas-line);border-radius:8px;overflow:hidden;background:#fff;\r\n    }\r\n    .mas-publication-checklist-head{\r\n      background:var(--mas-gold);color:var(--mas-black);\r\n      font-size:13px;font-weight:800;letter-spacing:1.2px;\r\n      text-transform:uppercase;padding:13px 18px;margin:0;\r\n    }\r\n    .mas-publication-section .mas-publication-checklist-head{margin:0;font-size:13px;}\r\n    .mas-publication-checklist-group .mas-publication-checklist{margin:0;padding:4px 18px 6px;}\r\n    .mas-publication-section .mas-publication-checklist-group ul.mas-publication-checklist{padding:4px 18px 6px;}\r\n    .mas-publication-checklist-group .mas-publication-checklist li:last-child{border-bottom:none;}\r\n\r\n    \/* ---------- TAKEAWAYS ---------- *\/\r\n    .mas-publication-takeaways{\r\n      margin:26px 0 30px;display:grid;gap:14px;\r\n      grid-template-columns:repeat(2,minmax(0,1fr));\r\n    }\r\n    .mas-publication-takeaway{\r\n      display:flex;gap:16px;border:1px solid var(--mas-line);\r\n      border-left:5px solid var(--mas-gold);border-radius:0 8px 8px 0;\r\n      padding:16px 20px;background:#fff;\r\n    }\r\n    .mas-publication-takeaway-num{\r\n      flex:0 0 auto;width:30px;height:30px;border-radius:50%;\r\n      background:var(--mas-gold);color:var(--mas-black);\r\n      font-weight:800;font-size:15px;display:flex;\r\n      align-items:center;justify-content:center;\r\n    }\r\n    .mas-publication-section .mas-publication-takeaway h4{margin:0 0 5px;font-size:16px;font-weight:800;}\r\n    .mas-publication-section .mas-publication-takeaway p{margin:0;font-size:14px;color:#46464c;}\r\n\r\n    \/* ---------- FAQ ACCORDION ---------- *\/\r\n    .mas-publication-faq-item{\r\n      border-bottom:1px solid var(--mas-line);\r\n    }\r\n    .mas-publication-faq-q{\r\n      display:flex;align-items:flex-start;justify-content:space-between;gap:16px;\r\n      width:100%;background:none !important;border:none !important;text-align:left;\r\n      font-family:inherit;font-size:17px;font-weight:800;color:var(--mas-ink) !important;\r\n      padding:20px 0;cursor:pointer;line-height:1.45;box-shadow:none !important;\r\n      text-transform:none;letter-spacing:normal;border-radius:0;\r\n    }\r\n    .mas-publication-faq-q:hover{color:var(--mas-dark-gold) !important;}\r\n    .mas-publication-faq-icon{\r\n      flex:0 0 auto;width:26px;height:26px;border-radius:50%;\r\n      background:var(--mas-gold);color:var(--mas-black);\r\n      font-size:17px;font-weight:800;line-height:26px;text-align:center;\r\n      transition:transform .25s ease;\r\n    }\r\n    .mas-publication-faq-item.mas-faq-open .mas-publication-faq-icon{\r\n      transform:rotate(45deg);\r\n    }\r\n    .mas-publication-faq-a{\r\n      max-height:0;overflow:hidden;transition:max-height .3s ease;\r\n    }\r\n    .mas-publication-section .mas-publication-faq-a p{\r\n      font-size:15px;margin:0 0 20px;color:#3a3a40;padding-right:42px;\r\n    }\r\n\r\n    \/* ---------- CONCLUSION QUOTE ---------- *\/\r\n    .mas-publication-quote{\r\n      background:#111;color:var(--mas-white);\r\n      border-radius:10px;padding:30px 32px;margin:30px 0;\r\n      font-size:18px;font-style:italic;line-height:1.6;\r\n      border-left:6px solid var(--mas-gold);\r\n    }\r\n\r\n    \/* ---------- RESOURCES ---------- *\/\r\n    .mas-publication-res-group{margin:0 0 26px;}\r\n    .mas-publication-section .mas-publication-res-group h3{\r\n      margin:0 0 10px;font-size:12px;font-weight:800;letter-spacing:1.5px;\r\n      color:var(--mas-dark-gold);text-transform:uppercase;\r\n    }\r\n    .mas-publication-section .mas-publication-res-group ul{margin:0;padding:0;list-style:none;}\r\n    .mas-publication-section .mas-publication-res-group li{\r\n      margin:0 0 9px;font-size:15px;position:relative;padding-left:20px;\r\n    }\r\n    .mas-publication-resources-list li::before{\r\n      content:\"\\203A\";position:absolute;left:0;top:0;\r\n      color:var(--mas-gold);font-weight:800;font-size:18px;line-height:1.5;\r\n      pointer-events:none;\r\n    }\r\n    .mas-publication-resources-list a{\r\n      color:var(--mas-dark-gold);text-decoration:underline;\r\n      text-underline-offset:3px;position:relative;z-index:10;\r\n      pointer-events:auto;cursor:pointer;\r\n    }\r\n    .mas-publication-resources-list a:hover{color:var(--mas-black);}\r\n\r\n    \/* ---------- KEYBOARD FOCUS ---------- *\/\r\n    .mas-publication-wrapper a:focus-visible,\r\n    .mas-publication-wrapper button:focus-visible,\r\n    .mas-publication-download a:focus-visible,\r\n    .mas-publication-modal button:focus-visible,\r\n    .mas-publication-modal a:focus-visible{\r\n      outline:3px solid #cfa434 !important;outline-offset:2px;\r\n    }\r\n\r\n    \/* ---------- STICKY DOWNLOAD BUTTON ---------- *\/\r\n    .mas-publication-download,\r\n    .mas-publication-download *,\r\n    .mas-publication-modal-overlay,\r\n    .mas-publication-modal-overlay *{box-sizing:border-box;}\r\n    .mas-publication-download{\r\n      position:fixed;left:0;top:50%;transform:translateY(-50%);\r\n      z-index:9999;\r\n    }\r\n    .mas-publication-download a,\r\n    .mas-publication-download button{\r\n      display:flex;align-items:center;gap:8px;\r\n      writing-mode:vertical-lr;text-orientation:mixed;\r\n      transform:rotate(180deg);\r\n      background:#fabc17 !important;background-color:#fabc17 !important;color:#000000 !important;\r\n      font-weight:800;font-size:13px;letter-spacing:.08em;\r\n      padding:24px 15px;border-radius:6px 0 0 6px;\r\n      text-decoration:none !important;box-shadow:-4px 0 18px rgba(0,0,0,.28);\r\n      transition:background .15s;border:none !important;cursor:pointer;\r\n      font-family:inherit;white-space:nowrap;line-height:1.2;\r\n      -webkit-appearance:none;-moz-appearance:none;appearance:none;outline:none;\r\n    }\r\n    .mas-publication-download a:hover,\r\n    .mas-publication-download button:hover{background:#cfa434 !important;background-color:#cfa434 !important;color:#fff !important;}\r\n    .mas-publication-download svg{transform:rotate(90deg);flex:0 0 auto;}\r\n\r\n    \/* ---------- CF7 MODAL OVERLAY (literal colors - works anywhere) ---------- *\/\r\n    .mas-publication-modal-overlay{\r\n      display:none;\r\n      position:fixed;top:0;left:0;right:0;bottom:0;\r\n      background:rgba(0,0,0,0.65);\r\n      z-index:99999;\r\n      align-items:center;justify-content:center;\r\n    }\r\n    .mas-publication-modal-overlay.mas-publication-modal-open{display:flex !important;}\r\n    .mas-publication-modal{\r\n      background:#ffffff !important;background-color:#ffffff !important;\r\n      border-radius:12px;\r\n      padding:36px 32px 30px;\r\n      max-width:460px;width:92%;\r\n      max-height:90vh;overflow-y:auto;\r\n      position:relative;\r\n      box-shadow:0 12px 48px rgba(0,0,0,0.25);\r\n      font-family:inherit;\r\n    }\r\n    .mas-publication-modal-close{\r\n      position:absolute;top:12px;right:14px;\r\n      background:none !important;border:none !important;font-size:22px;\r\n      color:#55555c !important;cursor:pointer;line-height:1;padding:4px 8px;\r\n      box-shadow:none !important;\r\n    }\r\n    .mas-publication-modal-close:hover{color:#000000 !important;}\r\n    .mas-publication-modal h3{\r\n      font-size:20px;font-weight:800;margin:0 0 6px;color:#16161a;\r\n    }\r\n    .mas-publication-modal p{\r\n      font-size:14px;color:#55555c;margin:0 0 20px;\r\n    }\r\n    .mas-publication-modal .wpcf7{margin:0;}\r\n    .mas-publication-modal .wpcf7 label{\r\n      display:block;font-size:14px;font-weight:600;\r\n      color:#16161a;margin:0 0 14px;\r\n    }\r\n    .mas-publication-modal .wpcf7 input[type=\"text\"],\r\n    .mas-publication-modal .wpcf7 input[type=\"email\"],\r\n    .mas-publication-modal .wpcf7 input[type=\"tel\"]{\r\n      width:100%;padding:10px 14px;border:1px solid #e7e7e7;\r\n      border-radius:6px;font-size:15px;margin-top:4px;font-family:inherit;\r\n      background:#ffffff;color:#16161a;\r\n    }\r\n    .mas-publication-modal .wpcf7 input[type=\"submit\"]{\r\n      background:#fabc17 !important;color:#000000 !important;\r\n      border:none;padding:13px 28px;border-radius:6px;\r\n      font-weight:800;font-size:15px;cursor:pointer;\r\n      width:100%;margin-top:6px;font-family:inherit;transition:background .15s;\r\n    }\r\n    .mas-publication-modal .wpcf7 input[type=\"submit\"]:hover{\r\n      background:#cfa434 !important;color:#fff !important;\r\n    }\r\n    .mas-publication-modal a.mas-publication-pdf-link{\r\n      display:block;text-align:center;background:#fabc17 !important;color:#000000 !important;\r\n      font-weight:800;font-size:15px;padding:14px 28px;border-radius:6px;\r\n      text-decoration:none !important;margin-top:10px;cursor:pointer;\r\n      position:relative;z-index:10;pointer-events:auto;\r\n    }\r\n    .mas-publication-modal a.mas-publication-pdf-link:hover{background:#cfa434 !important;color:#ffffff !important;}\r\n\r\n    \/* ---------- RESPONSIVE ---------- *\/\r\n    @media (max-width:900px){\r\n      .mas-publication-wrapper{--mas-pad:28px;}\r\n      .mas-publication-takeaways{grid-template-columns:1fr;}\r\n      .mas-publication-cards{grid-template-columns:1fr;}\r\n      .mas-publication-checklist-grid{grid-template-columns:1fr;}\r\n      .mas-publication-risk-grid{grid-template-columns:1fr;}\r\n      .mas-publication-risk-scale{display:none;}\r\n      .mas-publication-section h3{font-size:18px;}\r\n      .mas-publication-flow-arrow{display:none;}\r\n      .mas-publication-flow-item,\r\n      .mas-publication-flow-compact .mas-publication-flow-item{flex:1 1 100%;}\r\n      .mas-publication-converge{grid-template-columns:1fr;}\r\n      .mas-publication-converge-arrow{transform:rotate(90deg);}\r\n    }\r\n\r\n    @media (max-width:768px){\r\n      .mas-publication-wrapper{--mas-pad:18px;}\r\n      .mas-publication-toc{padding:22px 20px;}\r\n      .mas-publication-toc a{padding:15px 4px;min-height:48px;}\r\n      .mas-publication-section{padding:32px 0 6px;}\r\n      .mas-publication-section-head{gap:10px;}\r\n      .mas-publication-num{width:32px;height:32px;font-size:15px;}\r\n      .mas-publication-statbox,\r\n      .mas-publication-warning{padding:18px 20px;}\r\n      .mas-publication-section ul.mas-publication-list-2col{columns:1;}\r\n      .mas-publication-step{flex-direction:column;}\r\n      .mas-publication-step-label{min-width:100%;justify-content:flex-start;padding:9px 16px;}\r\n      .mas-publication-faq-q{padding:16px 0;min-height:48px;font-size:16px;}\r\n      .mas-publication-section .mas-publication-faq-a p{padding-right:0;}\r\n      .mas-publication-quote{padding:24px 22px;font-size:16px;}\r\n\r\n      .mas-publication-download{\r\n        position:fixed;left:0;right:0;bottom:0;top:auto;transform:none;\r\n        width:100%;\r\n      }\r\n      .mas-publication-download a,\r\n      .mas-publication-download button{\r\n        writing-mode:horizontal-tb;text-orientation:initial;transform:none;\r\n        justify-content:center;border-radius:0;\r\n        padding:16px 24px;font-size:15px;\r\n        box-shadow:0 -2px 12px rgba(0,0,0,.18);\r\n        width:100%;\r\n      }\r\n      .mas-publication-download svg{transform:none;}\r\n      .mas-publication-body{padding-bottom:84px;}\r\n      .mas-publication-modal{padding:28px 20px 24px;}\r\n    }\r\n\r\n    @media (max-width:480px){\r\n      .mas-publication-section p,\r\n      .mas-publication-section ul li{font-size:15px;}\r\n      .mas-publication-section-head h2{font-size:21px;}\r\n      .mas-publication-section h3{font-size:17px;}\r\n      .mas-publication-table{min-width:420px;font-size:14px;}\r\n      .mas-publication-toc h2{font-size:19px;}\r\n      .mas-publication-type-label{font-size:10px;}\r\n      .mas-publication-converge-result{font-size:15px;padding:20px 16px;}\r\n    }\r\n\r\n    @media (prefers-reduced-motion:reduce){\r\n      .mas-publication-faq-a,\r\n      .mas-publication-faq-icon{transition:none;}\r\n    }\r\n  <\/style>\r\n\r\n  <div class=\"mas-publication-body\">\r\n\r\n    <!-- ================= ABOUT \/ DISCLAIMER ================= -->\r\n    <section class=\"mas-publication-details\">\r\n\r\n      <p class=\"mas-publication-block-label\">About This Guide<\/p>\r\n      <p>This guide is designed to help CFOs, controllers, accounts payable teams, business owners, bookkeepers, and auditors understand and prevent accounts payable (AP) fraud. It explains the most common forms of AP fraud, the warning signs of vendor payment fraud, and the preventive and detective controls that protect the entire vendor-to-payment lifecycle, from vendor onboarding and invoice verification through payment authorization, reconciliation, and ongoing monitoring. It concludes with a practical fraud prevention checklist. The guide is optimized for both human readers and AI-assisted search engines (AEO\/GEO), making it a useful reference for anyone responsible for protecting vendor payments.<\/p>\r\n\r\n      <p class=\"mas-publication-block-label\">Disclaimer<\/p>\r\n      <p class=\"mas-publication-disclaimer\">This E-Guide is for informational purposes only and does not constitute legal, tax, accounting, or security advice. If you suspect fraud, consult qualified accounting, legal, and security professionals, and contact your bank and the appropriate authorities promptly.<\/p>\r\n    <\/section>\r\n\r\n    <!-- ================= TABLE OF CONTENTS ================= -->\r\n    <nav class=\"mas-publication-toc\" aria-label=\"Table of contents\">\r\n      <h2>Table of Contents<\/h2>\r\n      <ol>\r\n        <li class=\"mas-publication-toc-plain\"><a href=\"#executive-summary\">Executive Summary<\/a><\/li>\r\n        <li><a href=\"#section-1\">Understanding Accounts Payable Fraud<\/a><\/li>\r\n        <li><a href=\"#section-2\">Common Types of Accounts Payable Fraud<\/a><\/li>\r\n        <li><a href=\"#section-3\">Warning Signs of Vendor Payment Fraud<\/a><\/li>\r\n        <li><a href=\"#section-4\">Building Strong Vendor Onboarding Controls<\/a><\/li>\r\n        <li><a href=\"#section-5\">Protecting Vendor Invoices<\/a><\/li>\r\n        <li><a href=\"#section-6\">Protecting Vendor Payment Information<\/a><\/li>\r\n        <li><a href=\"#section-7\">Segregation of Duties in Accounts Payable<\/a><\/li>\r\n        <li><a href=\"#section-8\">Payment Approval and Authorization Controls<\/a><\/li>\r\n        <li><a href=\"#section-9\">Using Technology to Prevent AP Fraud<\/a><\/li>\r\n        <li><a href=\"#section-10\">Reconciling Vendor Payments and Bank Activity<\/a><\/li>\r\n        <li><a href=\"#section-11\">Creating an AP Fraud Monitoring Framework<\/a><\/li>\r\n        <li><a href=\"#section-12\">Practical AP Fraud Prevention Checklist<\/a><\/li>\r\n        <li class=\"mas-publication-toc-plain\"><a href=\"#faq\">Frequently Asked Questions<\/a><\/li>\r\n        <li class=\"mas-publication-toc-plain\"><a href=\"#key-takeaways\">Key Takeaways<\/a><\/li>\r\n        <li class=\"mas-publication-toc-plain\"><a href=\"#conclusion\">Conclusion<\/a><\/li>\r\n        <li class=\"mas-publication-toc-plain\"><a href=\"#resources\">Further Reading &amp; Official Resources<\/a><\/li>\r\n      <\/ol>\r\n    <\/nav>\r\n\r\n    <!-- ================= EXECUTIVE SUMMARY ================= -->\r\n    <section class=\"mas-publication-section\" id=\"executive-summary\">\r\n      <p class=\"mas-publication-eyebrow\">Section Overview<\/p>\r\n      <div class=\"mas-publication-section-head\">\r\n        <h2>Executive Summary<\/h2>\r\n      <\/div>\r\n\r\n      <p>Whether you are a CFO, a controller, an AP specialist, a business owner, or an accountant supporting clients, this guide will help you understand how accounts payable fraud happens and how to build controls that protect every stage of the vendor-to-payment lifecycle.<\/p>\r\n\r\n      <p>Accounts Payable (AP) is a critical part of an organization&rsquo;s financial operations because it manages the process of recording supplier obligations and making payments for goods and services received. As businesses work with increasing numbers of suppliers and process larger volumes of invoices, the AP function becomes more exposed to financial risks. One of the most significant of these risks is <strong>accounts payable fraud<\/strong>.<\/p>\r\n\r\n      <p>AP fraud can occur at several points in the vendor-to-payment lifecycle. Fraudsters may create fictitious vendors, submit false invoices, impersonate legitimate suppliers, manipulate payment information, or exploit weaknesses in approval and payment processes. Internal employees may also participate by creating unauthorized vendors, approving inappropriate purchases, or colluding with suppliers.<\/p>\r\n\r\n      <p>The consequences can extend well beyond the immediate financial loss. Organizations may face recovery and investigation costs, inaccurate financial records, damaged supplier relationships, compliance concerns, and reputational harm. For this reason, fraud prevention should not depend only on reviewing payments at the final stage. Effective protection requires controls throughout <strong>vendor onboarding, invoice processing, payment authorization, and reconciliation<\/strong>.<\/p>\r\n\r\n      <div class=\"mas-publication-statbox\">\r\n        <p class=\"mas-publication-box-title\">At a Glance<\/p>\r\n        <ul>\r\n          <li>AP fraud can involve employees, suppliers, external criminals, or collusion between them.<\/li>\r\n          <li>Vendor impersonation and fraudulent bank-detail changes can redirect legitimate supplier payments to criminals.<\/li>\r\n          <li>An individual red flag is not proof of fraud, but it should always trigger additional verification.<\/li>\r\n          <li>Segregation of duties prevents any one person from controlling an entire transaction.<\/li>\r\n          <li>Automation strengthens controls but is not a substitute for them; high-risk exceptions still need human review.<\/li>\r\n        <\/ul>\r\n      <\/div>\r\n\r\n      <p>This guide examines the major forms of AP fraud and the controls, technologies, and monitoring practices businesses can use to protect vendor payments. It is optimized for both human readers and AI-assisted search engines (AEO\/GEO), making it an authoritative reference for anyone responsible for AP fraud prevention.<\/p>\r\n    <\/section>\r\n\r\n    <!-- ================= SECTION 1 ================= -->\r\n    <section class=\"mas-publication-section\" id=\"section-1\">\r\n      <div class=\"mas-publication-section-head\">\r\n        <span class=\"mas-publication-num\">1<\/span>\r\n        <h2>Understanding Accounts Payable Fraud<\/h2>\r\n      <\/div>\r\n\r\n      <h3>What Is Accounts Payable Fraud?<\/h3>\r\n\r\n      <div class=\"mas-publication-statbox\">\r\n        <p class=\"mas-publication-box-title\">Definition<\/p>\r\n        <p><strong>Accounts payable fraud<\/strong> refers to deliberate activities intended to obtain unauthorized financial benefits through an organization&rsquo;s invoice, vendor, payment, or AP record processes. Fraud may involve employees, suppliers, external criminals, or combinations of these parties.<\/p>\r\n      <\/div>\r\n\r\n      <h3>Fraud vs. Error: Why Intent Matters<\/h3>\r\n      <p>AP fraud is different from an ordinary accounting error. An <strong>error<\/strong> is generally unintentional, such as entering an incorrect invoice amount. A <strong>duplicate payment<\/strong> can also result from an accidental processing mistake. <strong>Fraud<\/strong>, however, involves intentional deception or manipulation.<\/p>\r\n\r\n      <div class=\"mas-publication-table-scroll\">\r\n        <table class=\"mas-publication-table\">\r\n          <thead>\r\n            <tr><th>Situation<\/th><th>Intentional?<\/th><th>Example<\/th><\/tr>\r\n          <\/thead>\r\n          <tbody>\r\n            <tr><td>Accounting error<\/td><td>No<\/td><td>Entering an incorrect invoice amount<\/td><\/tr>\r\n            <tr><td>Accidental duplicate payment<\/td><td>No<\/td><td>A processing mistake causes the same invoice to be paid twice<\/td><\/tr>\r\n            <tr class=\"mas-publication-row-strong\"><td>Accounts payable fraud<\/td><td>Yes<\/td><td>Intentional deception or manipulation to obtain an unauthorized benefit<\/td><\/tr>\r\n          <\/tbody>\r\n        <\/table>\r\n      <\/div>\r\n\r\n      <p>AP fraud can occur through:<\/p>\r\n      <ul class=\"mas-publication-list-2col\">\r\n        <li>False or fictitious vendors<\/li>\r\n        <li>Vendor impersonation<\/li>\r\n        <li>Duplicate payments<\/li>\r\n        <li>Unauthorized purchases<\/li>\r\n        <li>Fraudulent invoices<\/li>\r\n        <li>Manipulated bank details<\/li>\r\n        <li>Inflated charges<\/li>\r\n        <li>Employee and supplier collusion<\/li>\r\n      <\/ul>\r\n\r\n      <h3>Why AP Is a Common Target<\/h3>\r\n      <p>Vendor payments are vulnerable because AP departments may process thousands of transactions involving numerous suppliers, departments, and payment methods. Manual invoice processing can create opportunities for manipulation, particularly when employees rely heavily on email, spreadsheets, or paper documents. Other weaknesses include:<\/p>\r\n\r\n      <div class=\"mas-publication-table-scroll\">\r\n        <table class=\"mas-publication-table\">\r\n          <thead>\r\n            <tr><th>Control Weakness<\/th><th>How It Creates Fraud Risk<\/th><\/tr>\r\n          <\/thead>\r\n          <tbody>\r\n            <tr><td>Limited segregation of duties<\/td><td>One person can control several stages of the same transaction<\/td><\/tr>\r\n            <tr><td>Inadequate vendor verification<\/td><td>Fictitious or impersonated vendors can enter the vendor master<\/td><\/tr>\r\n            <tr><td>Weak approval procedures<\/td><td>Unauthorized or inflated invoices can be approved without challenge<\/td><\/tr>\r\n            <tr><td>Unrestricted access to supplier information<\/td><td>Vendor records and bank details can be altered without oversight<\/td><\/tr>\r\n            <tr><td>Poor monitoring of bank-detail changes<\/td><td>Legitimate payments can be redirected to fraudulent accounts<\/td><\/tr>\r\n            <tr><td>Incomplete reconciliation procedures<\/td><td>Unauthorized payments may go undetected<\/td><\/tr>\r\n          <\/tbody>\r\n        <\/table>\r\n      <\/div>\r\n\r\n      <h3>Where Fraud Can Enter the Vendor-to-Payment Lifecycle<\/h3>\r\n      <p>Fraud can originate at any stage of the AP process, which is why a single final review is never enough:<\/p>\r\n\r\n      <!-- IMAGE 1: Vendor-to-Payment Lifecycle -->\r\n      <div class=\"mas-publication-visual\">\r\n        <figure class=\"mas-publication-figure\">\r\n          <a href=\"[IMAGE_1_URL]\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"[IMAGE_1_URL]\" alt=\"Vendor-to-payment lifecycle: vendor onboarding, invoice submission, invoice approval, vendor-master maintenance, payment preparation, and payment authorization\" width=\"1200\" height=\"200\"><\/a>\r\n        <\/figure>\r\n        <div class=\"mas-publication-visual-fallback mas-publication-flow mas-publication-flow-compact\">\r\n          <div class=\"mas-publication-flow-item\">Vendor Onboarding<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Invoice Submission<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Invoice Approval<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Vendor-Master Maintenance<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Payment Preparation<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Payment Authorization<\/div>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <h3>Financial Impact of AP Fraud<\/h3>\r\n      <p>The most obvious consequence is the <strong>direct loss of money<\/strong>. However, the total impact can be considerably greater. Businesses may also experience:<\/p>\r\n      <ul>\r\n        <li>Costs associated with investigating fraudulent transactions<\/li>\r\n        <li>Expenses related to recovering funds<\/li>\r\n        <li>Disruption to normal AP operations<\/li>\r\n        <li>Supplier relationship problems<\/li>\r\n        <li>Incorrect financial reporting<\/li>\r\n        <li>Audit and compliance concerns<\/li>\r\n        <li>Damage to organizational reputation<\/li>\r\n      <\/ul>\r\n\r\n      <div class=\"mas-publication-warning\">\r\n        <p class=\"mas-publication-box-title\">Key Principle<\/p>\r\n        <p>AP fraud prevention should be viewed as an important element of <strong>financial governance<\/strong> rather than simply an accounting control.<\/p>\r\n      <\/div>\r\n\r\n      <h3>Preventive and Detective Controls<\/h3>\r\n      <p>An effective program combines controls that stop fraud before payment with controls that identify it afterwards. This guide covers both:<\/p>\r\n\r\n      <div class=\"mas-publication-table-scroll\">\r\n        <table class=\"mas-publication-table\">\r\n          <thead>\r\n            <tr><th>Control Type<\/th><th>Purpose<\/th><th>Covered In<\/th><\/tr>\r\n          <\/thead>\r\n          <tbody>\r\n            <tr><td><strong>Preventive<\/strong><\/td><td>Stop fraudulent vendors, invoices, and payments before money leaves the business<\/td><td>Sections 4 to 8<\/td><\/tr>\r\n            <tr><td><strong>Technology-enabled<\/strong><\/td><td>Automate matching, duplicate detection, change monitoring, and workflows<\/td><td>Section 9<\/td><\/tr>\r\n            <tr><td><strong>Detective<\/strong><\/td><td>Identify unauthorized or unusual activity after it is recorded<\/td><td>Sections 10 and 11<\/td><\/tr>\r\n          <\/tbody>\r\n        <\/table>\r\n      <\/div>\r\n    <\/section>\r\n\r\n    <!-- ================= SECTION 2 ================= -->\r\n    <section class=\"mas-publication-section\" id=\"section-2\">\r\n      <div class=\"mas-publication-section-head\">\r\n        <span class=\"mas-publication-num\">2<\/span>\r\n        <h2>Common Types of Accounts Payable Fraud<\/h2>\r\n      <\/div>\r\n\r\n      <p>AP fraud takes several distinct forms. Each exploits a different weakness, so each requires a specific control. The table below summarizes the seven most common types covered in this section.<\/p>\r\n\r\n      <div class=\"mas-publication-table-scroll\">\r\n        <table class=\"mas-publication-table\">\r\n          <thead>\r\n            <tr><th>Fraud Type<\/th><th>How It Works<\/th><th>Primary Control<\/th><\/tr>\r\n          <\/thead>\r\n          <tbody>\r\n            <tr><td><strong>Fictitious vendors<\/strong><\/td><td>A vendor record is created for a supplier that provides no legitimate goods or services<\/td><td>Vendor onboarding and independent verification<\/td><\/tr>\r\n            <tr><td><strong>Vendor impersonation<\/strong><\/td><td>A fraudster poses as a real supplier, often requesting new bank details<\/td><td>Independent verification of changes<\/td><\/tr>\r\n            <tr><td><strong>Business email compromise<\/strong><\/td><td>Compromised or spoofed email is used to push unauthorized payments<\/td><td>Verification through trusted channels<\/td><\/tr>\r\n            <tr><td><strong>Invoice fraud<\/strong><\/td><td>Invoices that do not represent legitimate business obligations<\/td><td>Invoice matching and verification<\/td><\/tr>\r\n            <tr><td><strong>Duplicate invoices and payments<\/strong><\/td><td>The same obligation is paid more than once<\/td><td>Automated duplicate detection with review<\/td><\/tr>\r\n            <tr><td><strong>Overbilling<\/strong><\/td><td>Quantities, prices, or additional charges are manipulated<\/td><td>Comparison to POs, contracts, and receiving<\/td><\/tr>\r\n            <tr><td><strong>Employee-related fraud<\/strong><\/td><td>Employees act alone or collude with suppliers<\/td><td>Segregation of duties<\/td><\/tr>\r\n          <\/tbody>\r\n        <\/table>\r\n      <\/div>\r\n\r\n      <h3 class=\"mas-publication-type-head\"><span class=\"mas-publication-type-label\">Type 1<\/span>Fake or Fictitious Vendors<\/h3>\r\n      <p>A fictitious vendor is a supplier that does not legitimately provide goods or services to the organization. A fraudulent vendor account may be created by an employee or an external party.<\/p>\r\n\r\n      <div class=\"mas-publication-example\">\r\n        <p class=\"mas-publication-box-title\">Example<\/p>\r\n        <p>An employee could create a vendor record using a false business name and then submit invoices against that vendor. If the vendor creation and payment processes are controlled by the same person, the fraudulent transaction may be difficult to identify.<\/p>\r\n      <\/div>\r\n\r\n      <p>Strong vendor onboarding and independent verification can significantly reduce this risk.<\/p>\r\n\r\n      <h3 class=\"mas-publication-type-head\"><span class=\"mas-publication-type-label\">Type 2<\/span>Vendor Impersonation<\/h3>\r\n      <p>Vendor impersonation occurs when a fraudster pretends to be a legitimate supplier. The fraudster may use a similar email address, company name, or communication style.<\/p>\r\n\r\n      <div class=\"mas-publication-example\">\r\n        <p class=\"mas-publication-box-title\">Common Scenario<\/p>\r\n        <p>A request states that a supplier has changed its bank account and asks that future payments be sent to the new account. Because the request may appear genuine, organizations should <strong>never rely solely on email instructions<\/strong> when changing sensitive payment information.<\/p>\r\n      <\/div>\r\n\r\n      <h3 class=\"mas-publication-type-head\"><span class=\"mas-publication-type-label\">Type 3<\/span>Business Email Compromise (BEC)<\/h3>\r\n      <p>Business email compromise involves the use or compromise of email accounts to influence employees into making unauthorized payments. Fraudulent requests may include:<\/p>\r\n      <ul class=\"mas-publication-list-2col\">\r\n        <li>Urgent payment instructions<\/li>\r\n        <li>Bank-detail changes<\/li>\r\n        <li>Same-day payment requests<\/li>\r\n        <li>Requests for confidential information<\/li>\r\n        <li>Requests to bypass normal approval procedures<\/li>\r\n      <\/ul>\r\n      <p>Employees should verify unusual payment requests through <strong>trusted communication channels<\/strong>.<\/p>\r\n\r\n      <h3 class=\"mas-publication-type-head\"><span class=\"mas-publication-type-label\">Type 4<\/span>Invoice Fraud<\/h3>\r\n      <p>Invoice fraud involves submitting invoices that do not represent legitimate business obligations. Examples include:<\/p>\r\n      <ul class=\"mas-publication-list-2col\">\r\n        <li>Completely fake invoices<\/li>\r\n        <li>Charges for goods never received<\/li>\r\n        <li>Unauthorized fees<\/li>\r\n        <li>Inflated invoices<\/li>\r\n        <li>Charges for services never performed<\/li>\r\n        <li>Manipulated prices<\/li>\r\n      <\/ul>\r\n      <p>Invoice matching and verification are important controls for detecting these situations.<\/p>\r\n\r\n      <h3 class=\"mas-publication-type-head\"><span class=\"mas-publication-type-label\">Type 5<\/span>Duplicate Invoices and Payments<\/h3>\r\n      <p>Duplicate payments occur when the same financial obligation is paid more than once. This may happen accidentally, but deliberate duplicate submissions can also be fraudulent. Fraudsters may slightly modify:<\/p>\r\n      <ul class=\"mas-publication-list-2col\">\r\n        <li>Invoice numbers<\/li>\r\n        <li>Invoice descriptions<\/li>\r\n        <li>Supplier information<\/li>\r\n        <li>Invoice dates<\/li>\r\n        <li>Amounts<\/li>\r\n      <\/ul>\r\n      <p>Automated duplicate detection combined with manual review of exceptions can reduce this risk.<\/p>\r\n\r\n      <h3 class=\"mas-publication-type-head\"><span class=\"mas-publication-type-label\">Type 6<\/span>Overbilling and Inflated Charges<\/h3>\r\n      <p>A supplier or employee may deliberately manipulate quantities, prices, or additional charges. For example, an invoice might contain a higher quantity than was actually delivered or include fees that were never authorized.<\/p>\r\n      <p>Comparing invoices against purchase orders, contracts, and receiving records helps identify these discrepancies.<\/p>\r\n\r\n      <h3 class=\"mas-publication-type-head\"><span class=\"mas-publication-type-label\">Type 7<\/span>Employee-Related AP Fraud<\/h3>\r\n      <p>Employees may commit AP fraud independently or through collusion with suppliers. Examples include:<\/p>\r\n      <ul class=\"mas-publication-list-2col\">\r\n        <li>Creating unauthorized vendors<\/li>\r\n        <li>Submitting personal expenses as business expenses<\/li>\r\n        <li>Manipulating invoices<\/li>\r\n        <li>Approving personal purchases<\/li>\r\n        <li>Colluding with suppliers<\/li>\r\n        <li>Circumventing approval limits<\/li>\r\n      <\/ul>\r\n\r\n      <div class=\"mas-publication-warning\">\r\n        <p class=\"mas-publication-box-title\">Key Control<\/p>\r\n        <p>Segregation of duties is particularly important in preventing one individual from controlling the entire transaction.<\/p>\r\n      <\/div>\r\n    <\/section>\r\n\r\n    <!-- ================= SECTION 3 ================= -->\r\n    <section class=\"mas-publication-section\" id=\"section-3\">\r\n      <div class=\"mas-publication-section-head\">\r\n        <span class=\"mas-publication-num\">3<\/span>\r\n        <h2>Warning Signs of Vendor Payment Fraud<\/h2>\r\n      <\/div>\r\n\r\n      <p>Fraud does not always have an obvious appearance. Businesses should therefore monitor <strong>unusual patterns<\/strong> rather than relying on any single indicator. The warning signs fall into four categories:<\/p>\r\n\r\n      <div class=\"mas-publication-cards\">\r\n        <div class=\"mas-publication-card\">\r\n          <h4>Suspicious Vendor Information<\/h4>\r\n          <ul>\r\n            <li>New vendors with limited documentation<\/li>\r\n            <li>Duplicate vendor names<\/li>\r\n            <li>Similar addresses or contact details<\/li>\r\n            <li>Unusual email domains<\/li>\r\n            <li>Vendors that closely resemble existing suppliers<\/li>\r\n          <\/ul>\r\n        <\/div>\r\n        <div class=\"mas-publication-card\">\r\n          <h4>Unusual Invoice Patterns<\/h4>\r\n          <ul>\r\n            <li>Repeated round-dollar invoices<\/li>\r\n            <li>Repeated identical amounts<\/li>\r\n            <li>Sequential invoice numbers<\/li>\r\n            <li>Unexpected changes in billing frequency<\/li>\r\n            <li>Large invoices inconsistent with historical activity<\/li>\r\n          <\/ul>\r\n        <\/div>\r\n        <div class=\"mas-publication-card\">\r\n          <h4>Suspicious Payment Requests<\/h4>\r\n          <ul>\r\n            <li>Last-minute bank-detail changes<\/li>\r\n            <li>Urgent payment requests<\/li>\r\n            <li>Requests to bypass standard approvals<\/li>\r\n            <li>Changes communicated only by email<\/li>\r\n            <li>Requests for payments outside normal schedules<\/li>\r\n          <\/ul>\r\n        <\/div>\r\n        <div class=\"mas-publication-card\">\r\n          <h4>Unusual Employee Activity<\/h4>\r\n          <ul>\r\n            <li>Repeated payments just below approval thresholds<\/li>\r\n            <li>Transactions outside normal purchasing patterns<\/li>\r\n            <li>Unusual relationships between employees and suppliers<\/li>\r\n            <li>Frequent overrides of normal procedures<\/li>\r\n          <\/ul>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <p>Suspicious vendor indicators do not automatically prove fraud. They should trigger additional verification.<\/p>\r\n\r\n      <div class=\"mas-publication-warning\">\r\n        <p class=\"mas-publication-box-title\">Important Note<\/p>\r\n        <p>An individual red flag is <strong>not necessarily evidence of fraud<\/strong>. Legitimate business circumstances can explain unusual transactions. Proper investigation and supporting documentation are therefore essential before concluding that fraudulent activity has occurred.<\/p>\r\n      <\/div>\r\n\r\n      <!-- IMAGE 2: Red flag review flow -->\r\n      <div class=\"mas-publication-visual\">\r\n        <figure class=\"mas-publication-figure\">\r\n          <a href=\"[IMAGE_2_URL]\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"[IMAGE_2_URL]\" alt=\"Red flag review process: red flag identified, additional verification, investigation and documentation, conclusion reached\" width=\"1200\" height=\"200\"><\/a>\r\n        <\/figure>\r\n        <div class=\"mas-publication-visual-fallback mas-publication-flow\">\r\n          <div class=\"mas-publication-flow-item\">Red Flag Identified<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Additional Verification<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Investigation and Documentation<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Conclusion Reached<\/div>\r\n        <\/div>\r\n      <\/div>\r\n    <\/section>\r\n\r\n    <!-- ================= SECTION 4 ================= -->\r\n    <section class=\"mas-publication-section\" id=\"section-4\">\r\n      <div class=\"mas-publication-section-head\">\r\n        <span class=\"mas-publication-num\">4<\/span>\r\n        <h2>Building Strong Vendor Onboarding Controls<\/h2>\r\n      <\/div>\r\n\r\n      <p>Fraud prevention begins before the first invoice is received. Vendor onboarding is therefore one of the most important stages of AP risk management.<\/p>\r\n\r\n      <!-- IMAGE 3: Vendor onboarding flow -->\r\n      <div class=\"mas-publication-visual\">\r\n        <figure class=\"mas-publication-figure\">\r\n          <a href=\"[IMAGE_3_URL]\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"[IMAGE_3_URL]\" alt=\"Vendor onboarding process: collect information, verify vendor, validate bank information, check for duplicates, approve, activate vendor\" width=\"1200\" height=\"200\"><\/a>\r\n        <\/figure>\r\n        <div class=\"mas-publication-visual-fallback mas-publication-flow mas-publication-flow-compact\">\r\n          <div class=\"mas-publication-flow-item\">Collect Information<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Verify Vendor<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Validate Bank Information<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Check for Duplicates<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Approve<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Activate Vendor<\/div>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <h3>Verifying Vendors<\/h3>\r\n      <p>Before creating a supplier record, businesses should collect and verify appropriate information, such as:<\/p>\r\n\r\n      <div class=\"mas-publication-table-scroll\">\r\n        <table class=\"mas-publication-table\">\r\n          <thead>\r\n            <tr><th>Vendor Information<\/th><th>Why It Is Verified<\/th><\/tr>\r\n          <\/thead>\r\n          <tbody>\r\n            <tr><td>Legal or trading name<\/td><td>Confirms the supplier is a genuine business entity<\/td><\/tr>\r\n            <tr><td>Tax identification information<\/td><td>Supports identity verification and tax reporting<\/td><\/tr>\r\n            <tr><td>Business address<\/td><td>Helps confirm the vendor&rsquo;s existence and detect duplicates<\/td><\/tr>\r\n            <tr><td>Contact details<\/td><td>Establishes trusted channels for future verification<\/td><\/tr>\r\n            <tr><td>Required tax forms<\/td><td>Supports tax compliance before payments begin<\/td><\/tr>\r\n            <tr><td>Banking information<\/td><td>Determines where payments are sent, so it requires extra scrutiny<\/td><\/tr>\r\n          <\/tbody>\r\n        <\/table>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-warning\">\r\n        <p class=\"mas-publication-box-title\">Key Rule<\/p>\r\n        <p>The organization should establish a clear <strong>minimum documentation requirement<\/strong> for vendor activation.<\/p>\r\n      <\/div>\r\n\r\n      <h3>Validating Bank Information<\/h3>\r\n      <p>Bank information deserves additional scrutiny because changing it can redirect legitimate payments to fraudulent accounts. Businesses should independently verify payment information rather than relying solely on the contact information contained in a change request.<\/p>\r\n      <p>Verification may involve contacting an established supplier representative through a trusted communication channel.<\/p>\r\n\r\n      <h3>Preventing Duplicate Vendor Records<\/h3>\r\n      <p>Vendor duplicates increase both payment and reporting risks. Organizations should check supplier records using information such as:<\/p>\r\n      <ul class=\"mas-publication-list-2col\">\r\n        <li>Vendor name<\/li>\r\n        <li>Address<\/li>\r\n        <li>Contact information<\/li>\r\n        <li>Tax identification number<\/li>\r\n        <li>Bank details<\/li>\r\n      <\/ul>\r\n\r\n      <div class=\"mas-publication-example\">\r\n        <p class=\"mas-publication-box-title\">Example<\/p>\r\n        <p>A new vendor should not be created simply because the supplier appears under a slightly different name. Matching the tax identification number, address, or bank details will often reveal that the supplier already exists in the vendor master.<\/p>\r\n      <\/div>\r\n\r\n      <h3>Vendor Approval<\/h3>\r\n      <p>Vendor creation should follow a defined approval process. Required documentation should be reviewed before activation, and responsibility for creating vendors should be <strong>separated from payment authorization<\/strong> whenever practical.<\/p>\r\n      <p>High-risk and inactive vendors should also receive periodic review.<\/p>\r\n    <\/section>\r\n\r\n    <!-- ================= SECTION 5 ================= -->\r\n    <section class=\"mas-publication-section\" id=\"section-5\">\r\n      <div class=\"mas-publication-section-head\">\r\n        <span class=\"mas-publication-num\">5<\/span>\r\n        <h2>Protecting Vendor Invoices<\/h2>\r\n      <\/div>\r\n\r\n      <p>Strong invoice controls help ensure that the organization pays only for legitimate goods and services.<\/p>\r\n\r\n      <h3>Establishing Invoice Submission Standards<\/h3>\r\n      <p>Businesses should establish approved invoice submission channels and communicate requirements clearly to suppliers. Invoices should contain relevant information such as:<\/p>\r\n      <ul class=\"mas-publication-list-2col\">\r\n        <li>Supplier name<\/li>\r\n        <li>Invoice date<\/li>\r\n        <li>Tax information<\/li>\r\n        <li>Supporting documentation where required<\/li>\r\n        <li>Invoice number<\/li>\r\n        <li>Amount<\/li>\r\n        <li>Purchase order reference<\/li>\r\n      <\/ul>\r\n      <p>Centralizing invoice intake makes it easier to apply consistent validation procedures.<\/p>\r\n\r\n      <h3>Verifying Invoices<\/h3>\r\n      <p>Before payment, AP should verify each of the following:<\/p>\r\n\r\n      <div class=\"mas-publication-steps\">\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Check 1<\/div><div class=\"mas-publication-step-text\">The supplier is legitimate.<\/div><\/div>\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Check 2<\/div><div class=\"mas-publication-step-text\">The invoice is addressed to the organization.<\/div><\/div>\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Check 3<\/div><div class=\"mas-publication-step-text\">The invoice number is valid.<\/div><\/div>\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Check 4<\/div><div class=\"mas-publication-step-text\">The amount is reasonable.<\/div><\/div>\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Check 5<\/div><div class=\"mas-publication-step-text\">The purchase was authorized.<\/div><\/div>\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Check 6<\/div><div class=\"mas-publication-step-text\">Goods or services were received.<\/div><\/div>\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Check 7<\/div><div class=\"mas-publication-step-text\">Required documentation exists.<\/div><\/div>\r\n      <\/div>\r\n\r\n      <h3>Two-Way and Three-Way Matching<\/h3>\r\n      <p><strong>Two-way matching<\/strong> compares an invoice with the relevant purchase order.<\/p>\r\n\r\n      <!-- IMAGE 4: Two-way matching -->\r\n      <div class=\"mas-publication-visual\">\r\n        <figure class=\"mas-publication-figure\">\r\n          <a href=\"[IMAGE_4_URL]\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"[IMAGE_4_URL]\" alt=\"Two-way matching: purchase order compared with invoice\" width=\"1200\" height=\"160\"><\/a>\r\n        <\/figure>\r\n        <div class=\"mas-publication-visual-fallback mas-publication-flow\">\r\n          <div class=\"mas-publication-flow-item\">Purchase Order<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&harr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Invoice<\/div>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <p><strong>Three-way matching<\/strong> compares the purchase order, the invoice, and the goods receipt or service confirmation.<\/p>\r\n\r\n      <!-- IMAGE 5: Three-way matching -->\r\n      <div class=\"mas-publication-visual\">\r\n        <figure class=\"mas-publication-figure\">\r\n          <a href=\"[IMAGE_5_URL]\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"[IMAGE_5_URL]\" alt=\"Three-way matching: purchase order, invoice, and goods receipt or service confirmation\" width=\"1200\" height=\"160\"><\/a>\r\n        <\/figure>\r\n        <div class=\"mas-publication-visual-fallback mas-publication-flow\">\r\n          <div class=\"mas-publication-flow-item\">Purchase Order<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&harr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Invoice<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&harr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Goods Receipt \/ Service Confirmation<\/div>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-statbox\">\r\n        <p class=\"mas-publication-box-title\">Why Three-Way Matching Matters<\/p>\r\n        <p>Three-way matching provides stronger assurance because it helps confirm that the organization <strong>received what it was billed for<\/strong>.<\/p>\r\n      <\/div>\r\n\r\n      <h3>Preventing Duplicate Invoices<\/h3>\r\n      <p>Duplicate detection should consider:<\/p>\r\n      <ul class=\"mas-publication-list-2col\">\r\n        <li>Invoice number<\/li>\r\n        <li>Invoice amount<\/li>\r\n        <li>Purchase order<\/li>\r\n        <li>Supplier<\/li>\r\n        <li>Invoice date<\/li>\r\n        <li>Similar invoice descriptions<\/li>\r\n      <\/ul>\r\n\r\n      <div class=\"mas-publication-warning\">\r\n        <p class=\"mas-publication-box-title\">Key Rule<\/p>\r\n        <p>Potential duplicates should be placed into an <strong>exception queue<\/strong> for investigation rather than automatically paid.<\/p>\r\n      <\/div>\r\n    <\/section>\r\n\r\n    <!-- ================= SECTION 6 ================= -->\r\n    <section class=\"mas-publication-section\" id=\"section-6\">\r\n      <div class=\"mas-publication-section-head\">\r\n        <span class=\"mas-publication-num\">6<\/span>\r\n        <h2>Protecting Vendor Payment Information<\/h2>\r\n      <\/div>\r\n\r\n      <p>Payment information is one of the highest-risk areas in AP because fraudulent changes can redirect legitimate supplier payments.<\/p>\r\n\r\n      <h3>Why Bank-Detail Changes Require Extra Scrutiny<\/h3>\r\n      <p>Fraudsters may impersonate suppliers and request that future payments be redirected to a different bank account. The risk is particularly high when employees accept email instructions without independent verification.<\/p>\r\n\r\n      <div class=\"mas-publication-table-scroll\">\r\n        <table class=\"mas-publication-table\">\r\n          <thead>\r\n            <tr><th>Unsafe Practice<\/th><th>Secure Practice<\/th><\/tr>\r\n          <\/thead>\r\n          <tbody>\r\n            <tr><td>Replying to the email that requested the change<\/td><td>Contacting the supplier through a previously established channel<\/td><\/tr>\r\n            <tr><td>Using phone numbers provided in the change request<\/td><td>Using contact details already on file<\/td><\/tr>\r\n            <tr><td>Updating bank details on receipt of the request<\/td><td>Updating only after verification and approval<\/td><\/tr>\r\n            <tr><td>Processing the change informally<\/td><td>Documenting every request, check, and approval<\/td><\/tr>\r\n          <\/tbody>\r\n        <\/table>\r\n      <\/div>\r\n\r\n      <h3>Establishing a Payment-Change Verification Process<\/h3>\r\n      <p>A strong process should include the following five steps:<\/p>\r\n\r\n      <div class=\"mas-publication-steps\">\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Step 1<\/div><div class=\"mas-publication-step-text\"><strong>Receive the change request<\/strong>Document the request and identify the requested change.<\/div><\/div>\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Step 2<\/div><div class=\"mas-publication-step-text\"><strong>Do not rely solely on the requesting email<\/strong>An email account may have been compromised.<\/div><\/div>\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Step 3<\/div><div class=\"mas-publication-step-text\"><strong>Independently verify the change<\/strong>Use a trusted supplier contact or previously established communication channel.<\/div><\/div>\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Step 4<\/div><div class=\"mas-publication-step-text\"><strong>Obtain appropriate approval<\/strong>Sensitive changes should require authorization according to organizational policy.<\/div><\/div>\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Step 5<\/div><div class=\"mas-publication-step-text\"><strong>Document the change<\/strong>Maintain evidence of the request, verification, approval, and update.<\/div><\/div>\r\n      <\/div>\r\n\r\n      <h3>Restricting Access<\/h3>\r\n      <p>Vendor master data should be protected through <strong>role-based permissions<\/strong>. Only authorized employees should be able to modify payment information. An audit trail should identify:<\/p>\r\n\r\n      <div class=\"mas-publication-table-scroll\">\r\n        <table class=\"mas-publication-table\">\r\n          <thead>\r\n            <tr><th>Audit Trail Field<\/th><th>What It Records<\/th><\/tr>\r\n          <\/thead>\r\n          <tbody>\r\n            <tr><td>Original request<\/td><td>Who requested the change, when, and through which channel<\/td><\/tr>\r\n            <tr><td>Verification method<\/td><td>How the change was independently confirmed<\/td><\/tr>\r\n            <tr><td>Approver<\/td><td>Who authorized the change<\/td><\/tr>\r\n            <tr><td>Date of change<\/td><td>When the vendor record was updated<\/td><\/tr>\r\n            <tr><td>Previous details<\/td><td>The payment information before the change<\/td><\/tr>\r\n            <tr><td>New details<\/td><td>The payment information after the change<\/td><\/tr>\r\n          <\/tbody>\r\n        <\/table>\r\n      <\/div>\r\n\r\n      <p>This provides accountability and makes investigations easier.<\/p>\r\n    <\/section>\r\n\r\n    <!-- ================= SECTION 7 ================= -->\r\n    <section class=\"mas-publication-section\" id=\"section-7\">\r\n      <div class=\"mas-publication-section-head\">\r\n        <span class=\"mas-publication-num\">7<\/span>\r\n        <h2>Segregation of Duties in Accounts Payable<\/h2>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-statbox\">\r\n        <p class=\"mas-publication-box-title\">Definition<\/p>\r\n        <p><strong>Segregation of duties<\/strong> is a fundamental internal control designed to prevent one person from controlling an entire financial transaction.<\/p>\r\n      <\/div>\r\n\r\n      <p>Ideally, responsibilities should be separated among the following stages:<\/p>\r\n\r\n      <!-- IMAGE 6: Segregation of duties stages -->\r\n      <div class=\"mas-publication-visual\">\r\n        <figure class=\"mas-publication-figure\">\r\n          <a href=\"[IMAGE_6_URL]\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"[IMAGE_6_URL]\" alt=\"Segregation of duties stages: vendor creation, invoice entry, invoice approval, payment preparation, payment authorization, bank reconciliation\" width=\"1200\" height=\"200\"><\/a>\r\n        <\/figure>\r\n        <div class=\"mas-publication-visual-fallback mas-publication-flow mas-publication-flow-compact\">\r\n          <div class=\"mas-publication-flow-item\">Vendor Creation<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Invoice Entry<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Invoice Approval<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Payment Preparation<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Payment Authorization<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Bank Reconciliation<\/div>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-example\">\r\n        <p class=\"mas-publication-box-title\">Example<\/p>\r\n        <p>An employee who creates a supplier should not independently authorize payments to that supplier. If one person controlled both steps, a fictitious vendor could be created and paid without independent review.<\/p>\r\n      <\/div>\r\n\r\n      <h3>Challenges for Small Businesses<\/h3>\r\n      <p>Small businesses may have limited staff, making complete segregation difficult. However, <strong>compensating controls<\/strong> can still be introduced:<\/p>\r\n\r\n      <div class=\"mas-publication-table-scroll\">\r\n        <table class=\"mas-publication-table\">\r\n          <thead>\r\n            <tr><th>Compensating Control<\/th><th>How It Helps<\/th><\/tr>\r\n          <\/thead>\r\n          <tbody>\r\n            <tr><td>Owner or manager review<\/td><td>Adds independent oversight of AP activity<\/td><\/tr>\r\n            <tr><td>Independent payment approval<\/td><td>Ensures someone other than the preparer releases payments<\/td><\/tr>\r\n            <tr><td>External bookkeeping review<\/td><td>Provides an outside check on records and transactions<\/td><\/tr>\r\n            <tr><td>Bank transaction alerts<\/td><td>Gives early notice of payments leaving the account<\/td><\/tr>\r\n            <tr><td>Regular review of vendor changes<\/td><td>Identifies unauthorized changes to vendor records<\/td><\/tr>\r\n          <\/tbody>\r\n        <\/table>\r\n      <\/div>\r\n\r\n      <h3>Managing User Access<\/h3>\r\n      <p>User access should also be reviewed whenever employees change roles or leave the organization. Temporary or excessive access should be removed promptly, because access that is no longer needed creates an opening for unauthorized changes to vendors, invoices, or payments.<\/p>\r\n    <\/section>\r\n\r\n    <!-- ================= SECTION 8 ================= -->\r\n    <section class=\"mas-publication-section\" id=\"section-8\">\r\n      <div class=\"mas-publication-section-head\">\r\n        <span class=\"mas-publication-num\">8<\/span>\r\n        <h2>Payment Approval and Authorization Controls<\/h2>\r\n      <\/div>\r\n\r\n      <p>A strong payment process ensures that legitimate invoices are paid efficiently while unusual transactions receive additional review.<\/p>\r\n\r\n      <h3>Establishing Payment Thresholds<\/h3>\r\n      <p>Businesses can establish different approval requirements based on payment value. For example:<\/p>\r\n\r\n      <div class=\"mas-publication-steps\">\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Lower-value<\/div><div class=\"mas-publication-step-text\"><span>May require <strong>one authorized approver<\/strong>.<\/span><\/div><\/div>\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Higher-value<\/div><div class=\"mas-publication-step-text\"><span>May require <strong>additional approval<\/strong>.<\/span><\/div><\/div>\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Exception<\/div><div class=\"mas-publication-step-text\"><span>Exception payments may require <strong>senior management review<\/strong>.<\/span><\/div><\/div>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-statbox\">\r\n        <p class=\"mas-publication-box-title\">Note<\/p>\r\n        <p>The specific thresholds should reflect the organization&rsquo;s size, risk level, and internal policies.<\/p>\r\n      <\/div>\r\n\r\n      <h3>Supporting Documentation<\/h3>\r\n      <p>Payment requests should be supported by appropriate evidence, such as:<\/p>\r\n      <ul class=\"mas-publication-list-2col\">\r\n        <li>Invoice<\/li>\r\n        <li>Receiving documentation<\/li>\r\n        <li>Approval record<\/li>\r\n        <li>Purchase order<\/li>\r\n        <li>Contract<\/li>\r\n      <\/ul>\r\n\r\n      <h3>Separating Payment Preparation and Release<\/h3>\r\n      <p>Where possible, the person preparing a payment should not be the same person responsible for releasing it. <strong>Dual authorization<\/strong> can provide additional protection for higher-risk payments.<\/p>\r\n\r\n      <!-- IMAGE 7: Payment preparation and release -->\r\n      <div class=\"mas-publication-visual\">\r\n        <figure class=\"mas-publication-figure\">\r\n          <a href=\"[IMAGE_7_URL]\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"[IMAGE_7_URL]\" alt=\"Payment prepared by Person A, payment reviewed, payment released by Person B\" width=\"1200\" height=\"160\"><\/a>\r\n        <\/figure>\r\n        <div class=\"mas-publication-visual-fallback mas-publication-flow\">\r\n          <div class=\"mas-publication-flow-item\">Payment Prepared (Person A)<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Payment Reviewed<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&rarr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Payment Released (Person B)<\/div>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <h3>Protecting Payment Credentials<\/h3>\r\n      <p>Organizations should use:<\/p>\r\n      <ul class=\"mas-publication-list-2col\">\r\n        <li>Restricted access<\/li>\r\n        <li>Secure payment platforms<\/li>\r\n        <li>Regular access reviews<\/li>\r\n        <li>Multi-factor authentication<\/li>\r\n        <li>Strong password practices<\/li>\r\n      <\/ul>\r\n\r\n      <div class=\"mas-publication-warning\">\r\n        <p class=\"mas-publication-box-title\">High-Attention Payments<\/p>\r\n        <p>Urgent or unusual payments should receive particular attention, including:<\/p>\r\n        <ul>\r\n          <li>Same-day requests<\/li>\r\n          <li>Manual checks outside normal processes<\/li>\r\n          <li>Payments to newly added bank accounts<\/li>\r\n          <li>Payments outside the organization&rsquo;s normal schedule<\/li>\r\n        <\/ul>\r\n      <\/div>\r\n    <\/section>\r\n\r\n    <!-- ================= SECTION 9 ================= -->\r\n    <section class=\"mas-publication-section\" id=\"section-9\">\r\n      <div class=\"mas-publication-section-head\">\r\n        <span class=\"mas-publication-num\">9<\/span>\r\n        <h2>Using Technology to Prevent AP Fraud<\/h2>\r\n      <\/div>\r\n\r\n      <p>Technology can strengthen AP fraud controls by reducing manual intervention and identifying unusual transactions.<\/p>\r\n\r\n      <h3>Automated Invoice Matching<\/h3>\r\n      <p>Automation can compare invoices against purchase orders and receiving information. Transactions that do not meet established criteria can be flagged for review. This reduces the risk that an invoice is paid without sufficient validation.<\/p>\r\n\r\n      <h3>Duplicate Payment Detection<\/h3>\r\n      <p>AP systems can identify potentially duplicate invoices by comparing:<\/p>\r\n      <ul class=\"mas-publication-list-2col\">\r\n        <li>Vendor<\/li>\r\n        <li>Amount<\/li>\r\n        <li>Purchase order<\/li>\r\n        <li>Invoice number<\/li>\r\n        <li>Date<\/li>\r\n        <li>Invoice content<\/li>\r\n      <\/ul>\r\n      <p>Pattern-based analysis can identify repeated payments that may otherwise be difficult to detect manually.<\/p>\r\n\r\n      <h3>Vendor Master Monitoring<\/h3>\r\n      <p>Technology can monitor changes to:<\/p>\r\n      <ul class=\"mas-publication-list-2col\">\r\n        <li>Bank details<\/li>\r\n        <li>Vendor status<\/li>\r\n        <li>Payment patterns<\/li>\r\n        <li>Vendor addresses<\/li>\r\n        <li>Duplicate vendor records<\/li>\r\n      <\/ul>\r\n      <p>Sensitive changes can be routed for additional approval.<\/p>\r\n\r\n      <h3>Automated Approval Workflows<\/h3>\r\n      <p>Workflow automation can enforce:<\/p>\r\n      <ul class=\"mas-publication-list-2col\">\r\n        <li>Role-based permissions<\/li>\r\n        <li>Approval sequences<\/li>\r\n        <li>Audit trails<\/li>\r\n        <li>Approval thresholds<\/li>\r\n        <li>Exception routing<\/li>\r\n      <\/ul>\r\n      <p>This reduces the possibility of informal approval practices bypassing established controls.<\/p>\r\n\r\n      <h3>Continuous Transaction Monitoring<\/h3>\r\n      <p>Organizations can use automated monitoring to identify:<\/p>\r\n      <ul class=\"mas-publication-list-2col\">\r\n        <li>Unusual payment amounts<\/li>\r\n        <li>Unexpected vendors<\/li>\r\n        <li>Repeated exceptions<\/li>\r\n        <li>Unusual timing<\/li>\r\n        <li>Transactions outside normal patterns<\/li>\r\n      <\/ul>\r\n\r\n      <div class=\"mas-publication-table-scroll\">\r\n        <table class=\"mas-publication-table\">\r\n          <thead>\r\n            <tr><th>Technology Capability<\/th><th>Fraud Risk It Addresses<\/th><\/tr>\r\n          <\/thead>\r\n          <tbody>\r\n            <tr><td>Automated invoice matching<\/td><td>Invoice fraud and overbilling<\/td><\/tr>\r\n            <tr><td>Duplicate payment detection<\/td><td>Duplicate invoices and payments<\/td><\/tr>\r\n            <tr><td>Vendor master monitoring<\/td><td>Fictitious vendors, impersonation, and bank-detail manipulation<\/td><\/tr>\r\n            <tr><td>Automated approval workflows<\/td><td>Bypassed approvals and circumvented limits<\/td><\/tr>\r\n            <tr><td>Continuous transaction monitoring<\/td><td>Unusual amounts, timing, vendors, and patterns<\/td><\/tr>\r\n          <\/tbody>\r\n        <\/table>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-warning\">\r\n        <p class=\"mas-publication-box-title\">Key Principle<\/p>\r\n        <p><strong>Automation is not a substitute for internal controls.<\/strong> Poorly configured systems can still allow fraudulent transactions to pass through. High-risk exceptions should receive human review.<\/p>\r\n      <\/div>\r\n    <\/section>\r\n\r\n    <!-- ================= SECTION 10 ================= -->\r\n    <section class=\"mas-publication-section\" id=\"section-10\">\r\n      <div class=\"mas-publication-section-head\">\r\n        <span class=\"mas-publication-num\">10<\/span>\r\n        <h2>Reconciling Vendor Payments and Bank Activity<\/h2>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-statbox\">\r\n        <p class=\"mas-publication-box-title\">Definition<\/p>\r\n        <p>Reconciliation is an important <strong>detective control<\/strong> because it compares recorded transactions with actual financial activity.<\/p>\r\n      <\/div>\r\n\r\n      <h3>Reconciling AP and Bank Transactions<\/h3>\r\n      <p>Businesses should confirm that payments recorded in AP correspond with actual bank transactions and were made to approved suppliers.<\/p>\r\n\r\n      <!-- IMAGE 8: AP records vs bank vs approved suppliers -->\r\n      <div class=\"mas-publication-visual\">\r\n        <figure class=\"mas-publication-figure\">\r\n          <a href=\"[IMAGE_8_URL]\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"[IMAGE_8_URL]\" alt=\"Reconciliation: AP payment records compared with bank transactions and the approved supplier list\" width=\"1200\" height=\"160\"><\/a>\r\n        <\/figure>\r\n        <div class=\"mas-publication-visual-fallback mas-publication-flow\">\r\n          <div class=\"mas-publication-flow-item\">AP Payment Records<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&harr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Bank Transactions<\/div>\r\n          <div class=\"mas-publication-flow-arrow\">&harr;<\/div>\r\n          <div class=\"mas-publication-flow-item\">Approved Supplier List<\/div>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <p>This can help identify:<\/p>\r\n      <ul class=\"mas-publication-list-2col\">\r\n        <li>Unexpected payments<\/li>\r\n        <li>Missing payments<\/li>\r\n        <li>Duplicate payments<\/li>\r\n        <li>Unauthorized transactions<\/li>\r\n      <\/ul>\r\n\r\n      <h3>Reviewing Vendor Statements<\/h3>\r\n      <p>Supplier statements can be compared with internal records to identify:<\/p>\r\n\r\n      <!-- IMAGE 9: Vendor statement vs internal records -->\r\n      <div class=\"mas-publication-visual\">\r\n        <figure class=\"mas-publication-figure\">\r\n          <a href=\"[IMAGE_9_URL]\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"[IMAGE_9_URL]\" alt=\"Vendor statement compared with internal records to identify open invoices, payments, credits, missing transactions, and unusual balances\" width=\"1200\" height=\"400\"><\/a>\r\n        <\/figure>\r\n        <div class=\"mas-publication-visual-fallback mas-publication-converge\">\r\n          <ul>\r\n            <li>Open invoices<\/li>\r\n            <li>Payments<\/li>\r\n            <li>Credits<\/li>\r\n            <li>Missing transactions<\/li>\r\n            <li>Unusual balances<\/li>\r\n          <\/ul>\r\n          <div class=\"mas-publication-converge-arrow\" aria-hidden=\"true\">&rarr;<\/div>\r\n          <div class=\"mas-publication-converge-result\">Vendor Statement vs. Internal Records<\/div>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-warning\">\r\n        <p class=\"mas-publication-box-title\">Key Rule<\/p>\r\n        <p>Differences should be <strong>investigated<\/strong> rather than simply adjusted without explanation.<\/p>\r\n      <\/div>\r\n\r\n      <h3>Periodic Vendor Audits<\/h3>\r\n      <p>Higher-risk suppliers should receive additional attention. Organizations may prioritize:<\/p>\r\n\r\n      <div class=\"mas-publication-table-scroll\">\r\n        <table class=\"mas-publication-table\">\r\n          <thead>\r\n            <tr><th>Vendor Category<\/th><th>Reason for Priority Review<\/th><\/tr>\r\n          <\/thead>\r\n          <tbody>\r\n            <tr><td>High-value vendors<\/td><td>Larger payments mean larger potential losses<\/td><\/tr>\r\n            <tr><td>Newly created vendors<\/td><td>Limited history makes legitimacy harder to confirm<\/td><\/tr>\r\n            <tr><td>Vendors with bank-detail changes<\/td><td>Changed details are a common route for payment redirection<\/td><\/tr>\r\n            <tr><td>Vendors with unusual payment patterns<\/td><td>Patterns may indicate manipulation or duplicates<\/td><\/tr>\r\n            <tr><td>Vendors with repeated invoice exceptions<\/td><td>Recurring exceptions may signal overbilling or invoice fraud<\/td><\/tr>\r\n          <\/tbody>\r\n        <\/table>\r\n      <\/div>\r\n\r\n      <p>Periodic reviews help identify problems before they become significant losses.<\/p>\r\n    <\/section>\r\n\r\n    <!-- ================= SECTION 11 ================= -->\r\n    <section class=\"mas-publication-section\" id=\"section-11\">\r\n      <div class=\"mas-publication-section-head\">\r\n        <span class=\"mas-publication-num\">11<\/span>\r\n        <h2>Creating an AP Fraud Monitoring Framework<\/h2>\r\n      <\/div>\r\n\r\n      <p>A structured monitoring framework makes fraud prevention more consistent.<\/p>\r\n\r\n      <h3>Establishing Fraud-Risk Indicators<\/h3>\r\n      <p>Businesses should define indicators that trigger additional review, such as:<\/p>\r\n      <ul class=\"mas-publication-list-2col\">\r\n        <li>New vendor<\/li>\r\n        <li>Duplicate invoice<\/li>\r\n        <li>Approval override<\/li>\r\n        <li>Bank-detail change<\/li>\r\n        <li>Unusual payment<\/li>\r\n        <li>Payment outside normal procedures<\/li>\r\n      <\/ul>\r\n\r\n      <h3>Assigning Risk Levels<\/h3>\r\n      <p>Transactions can be categorized according to risk:<\/p>\r\n\r\n      <!-- IMAGE 10: Risk levels -->\r\n      <div class=\"mas-publication-visual\">\r\n        <figure class=\"mas-publication-figure\">\r\n          <a href=\"[IMAGE_10_URL]\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"[IMAGE_10_URL]\" alt=\"Risk levels: low risk routine transactions follow the standard workflow; medium risk exceptions are reviewed and resolved before payment; high risk transactions receive enhanced verification before any payment is released\" width=\"1200\" height=\"500\"><\/a>\r\n        <\/figure>\r\n        <div class=\"mas-publication-visual-fallback\">\r\n          <div class=\"mas-publication-risk-scale\">Increasing scrutiny and verification<\/div>\r\n          <div class=\"mas-publication-risk-grid\">\r\n            <div class=\"mas-publication-risk-col\">\r\n              <div class=\"mas-publication-risk-head\">Low Risk<\/div>\r\n              <div class=\"mas-publication-risk-body\">\r\n                <p class=\"mas-publication-risk-label\">Transaction Profile<\/p>\r\n                <p>Routine transactions from established vendors that meet standard controls.<\/p>\r\n                <hr class=\"mas-publication-risk-divider\">\r\n                <p class=\"mas-publication-risk-label\">Response<\/p>\r\n                <p>Processed through the standard workflow and controls.<\/p>\r\n              <\/div>\r\n            <\/div>\r\n            <div class=\"mas-publication-risk-col\">\r\n              <div class=\"mas-publication-risk-head\">Medium Risk<\/div>\r\n              <div class=\"mas-publication-risk-body\">\r\n                <p class=\"mas-publication-risk-label\">Transaction Profile<\/p>\r\n                <p>Transactions containing exceptions or unusual characteristics.<\/p>\r\n                <hr class=\"mas-publication-risk-divider\">\r\n                <p class=\"mas-publication-risk-label\">Response<\/p>\r\n                <p>Exception reviewed and resolved before payment.<\/p>\r\n              <\/div>\r\n            <\/div>\r\n            <div class=\"mas-publication-risk-col\">\r\n              <div class=\"mas-publication-risk-head\">High Risk<\/div>\r\n              <div class=\"mas-publication-risk-body\">\r\n                <p class=\"mas-publication-risk-label\">Transaction Profile<\/p>\r\n                <p>Significant amounts, new vendors, sensitive payment changes, or multiple warning signs.<\/p>\r\n                <hr class=\"mas-publication-risk-divider\">\r\n                <p class=\"mas-publication-risk-label\">Response<\/p>\r\n                <p><strong>Enhanced verification<\/strong> before any payment is released.<\/p>\r\n              <\/div>\r\n            <\/div>\r\n          <\/div>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-warning\">\r\n        <p class=\"mas-publication-box-title\">Key Rule<\/p>\r\n        <p>High-risk transactions should receive <strong>enhanced verification<\/strong>.<\/p>\r\n      <\/div>\r\n\r\n      <h3>Tracking Fraud-Related KPIs<\/h3>\r\n      <p>Useful measures include:<\/p>\r\n\r\n      <div class=\"mas-publication-table-scroll\">\r\n        <table class=\"mas-publication-table\">\r\n          <thead>\r\n            <tr><th>Fraud-Related KPI<\/th><th>What It Helps Management Evaluate<\/th><\/tr>\r\n          <\/thead>\r\n          <tbody>\r\n            <tr><td>Duplicate payments prevented<\/td><td>Effectiveness of duplicate detection<\/td><\/tr>\r\n            <tr><td>Vendor-detail changes<\/td><td>Volume of high-risk changes requiring verification<\/td><\/tr>\r\n            <tr><td>Invoice exceptions<\/td><td>Quality of invoices and matching controls<\/td><\/tr>\r\n            <tr><td>Payment exceptions<\/td><td>Frequency of unusual or non-standard payments<\/td><\/tr>\r\n            <tr><td>Fraud incidents<\/td><td>Whether fraud attempts are succeeding<\/td><\/tr>\r\n            <tr><td>Amounts recovered<\/td><td>Effectiveness of response and recovery<\/td><\/tr>\r\n            <tr><td>Payment holds<\/td><td>How often suspicious payments are stopped for review<\/td><\/tr>\r\n          <\/tbody>\r\n        <\/table>\r\n      <\/div>\r\n\r\n      <p>Tracking these indicators allows management to identify weaknesses and evaluate whether controls are working.<\/p>\r\n\r\n      <h3>Establishing Escalation Procedures<\/h3>\r\n      <p>Organizations should define, in advance:<\/p>\r\n\r\n      <div class=\"mas-publication-steps\">\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Define 1<\/div><div class=\"mas-publication-step-text\">Who investigates suspected fraud<\/div><\/div>\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Define 2<\/div><div class=\"mas-publication-step-text\">Who can place a payment on hold<\/div><\/div>\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Define 3<\/div><div class=\"mas-publication-step-text\">Who contacts suppliers<\/div><\/div>\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Define 4<\/div><div class=\"mas-publication-step-text\">When management must be informed<\/div><\/div>\r\n        <div class=\"mas-publication-step\"><div class=\"mas-publication-step-label\">Define 5<\/div><div class=\"mas-publication-step-text\">When legal or compliance teams should become involved<\/div><\/div>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-statbox\">\r\n        <p class=\"mas-publication-box-title\">Why This Matters<\/p>\r\n        <p>Clear escalation procedures prevent uncertainty when a suspicious transaction is identified, so the payment can be held and investigated quickly.<\/p>\r\n      <\/div>\r\n    <\/section>\r\n\r\n    <!-- ================= SECTION 12 ================= -->\r\n    <section class=\"mas-publication-section\" id=\"section-12\">\r\n      <div class=\"mas-publication-section-head\">\r\n        <span class=\"mas-publication-num\">12<\/span>\r\n        <h2>Practical AP Fraud Prevention Checklist<\/h2>\r\n      <\/div>\r\n\r\n      <p>Use this checklist to assess your current AP controls. Each item corresponds to a control described earlier in this guide.<\/p>\r\n\r\n      <div class=\"mas-publication-checklist-grid\">\r\n        <div class=\"mas-publication-checklist-group\">\r\n          <h4 class=\"mas-publication-checklist-head\">Vendor Onboarding<\/h4>\r\n          <ul class=\"mas-publication-checklist\">\r\n            <li>Verify vendor identity<\/li>\r\n            <li>Collect required documentation<\/li>\r\n            <li>Confirm payment information independently<\/li>\r\n            <li>Check for duplicate vendors<\/li>\r\n            <li>Obtain appropriate approval before activation<\/li>\r\n          <\/ul>\r\n        <\/div>\r\n        <div class=\"mas-publication-checklist-group\">\r\n          <h4 class=\"mas-publication-checklist-head\">Invoice Processing<\/h4>\r\n          <ul class=\"mas-publication-checklist\">\r\n            <li>Use approved invoice submission channels<\/li>\r\n            <li>Match invoices with purchase orders where applicable<\/li>\r\n            <li>Verify goods or services received<\/li>\r\n            <li>Check for duplicate invoices<\/li>\r\n            <li>Review unusual charges<\/li>\r\n            <li>Obtain required approvals<\/li>\r\n          <\/ul>\r\n        <\/div>\r\n        <div class=\"mas-publication-checklist-group\">\r\n          <h4 class=\"mas-publication-checklist-head\">Payment Processing<\/h4>\r\n          <ul class=\"mas-publication-checklist\">\r\n            <li>Verify supplier payment information<\/li>\r\n            <li>Separate payment preparation and authorization<\/li>\r\n            <li>Review high-value payments<\/li>\r\n            <li>Monitor urgent payment requests<\/li>\r\n            <li>Confirm supporting documentation<\/li>\r\n            <li>Maintain payment records<\/li>\r\n          <\/ul>\r\n        <\/div>\r\n        <div class=\"mas-publication-checklist-group\">\r\n          <h4 class=\"mas-publication-checklist-head\">Ongoing Monitoring<\/h4>\r\n          <ul class=\"mas-publication-checklist\">\r\n            <li>Reconcile bank accounts<\/li>\r\n            <li>Review vendor master changes<\/li>\r\n            <li>Analyze unusual transactions<\/li>\r\n            <li>Review high-risk vendors<\/li>\r\n            <li>Monitor duplicate payments<\/li>\r\n            <li>Investigate unusual payment patterns<\/li>\r\n          <\/ul>\r\n        <\/div>\r\n        <div class=\"mas-publication-checklist-group\">\r\n          <h4 class=\"mas-publication-checklist-head\">Access Management<\/h4>\r\n          <ul class=\"mas-publication-checklist\">\r\n            <li>Restrict AP permissions<\/li>\r\n            <li>Use multi-factor authentication<\/li>\r\n            <li>Remove former employee access<\/li>\r\n            <li>Review user permissions periodically<\/li>\r\n            <li>Restrict vendor bank-detail editing rights<\/li>\r\n          <\/ul>\r\n        <\/div>\r\n      <\/div>\r\n    <\/section>\r\n\r\n    <!-- ================= FAQ ================= -->\r\n    <section class=\"mas-publication-section\" id=\"faq\">\r\n      <p class=\"mas-publication-eyebrow\">Reference<\/p>\r\n      <div class=\"mas-publication-section-head\">\r\n        <h2>Frequently Asked Questions<\/h2>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-faq-item\">\r\n        <button type=\"button\" class=\"mas-publication-faq-q\" aria-expanded=\"false\">\r\n          <span>What is accounts payable fraud?<\/span>\r\n          <span class=\"mas-publication-faq-icon\" aria-hidden=\"true\">+<\/span>\r\n        <\/button>\r\n        <div class=\"mas-publication-faq-a\">\r\n          <p>Accounts payable fraud refers to deliberate activities intended to obtain unauthorized financial benefits through an organization&rsquo;s invoice, vendor, payment, or AP record processes. It may involve employees, suppliers, external criminals, or combinations of these parties, and can take the form of fictitious vendors, false invoices, vendor impersonation, manipulated bank details, duplicate payments, inflated charges, or collusion.<\/p>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-faq-item\">\r\n        <button type=\"button\" class=\"mas-publication-faq-q\" aria-expanded=\"false\">\r\n          <span>What is the difference between an AP error and AP fraud?<\/span>\r\n          <span class=\"mas-publication-faq-icon\" aria-hidden=\"true\">+<\/span>\r\n        <\/button>\r\n        <div class=\"mas-publication-faq-a\">\r\n          <p>The difference is intent. An error is generally unintentional, such as entering an incorrect invoice amount, and a duplicate payment can result from an accidental processing mistake. Fraud involves intentional deception or manipulation. Because the two can look similar, red flags should be investigated and documented before concluding that fraud has occurred.<\/p>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-faq-item\">\r\n        <button type=\"button\" class=\"mas-publication-faq-q\" aria-expanded=\"false\">\r\n          <span>How do fraudsters redirect vendor payments?<\/span>\r\n          <span class=\"mas-publication-faq-icon\" aria-hidden=\"true\">+<\/span>\r\n        <\/button>\r\n        <div class=\"mas-publication-faq-a\">\r\n          <p>Most commonly through vendor impersonation or business email compromise. A fraudster poses as a legitimate supplier, often using a similar email address or a compromised account, and asks that future payments be sent to a new bank account. If the change is accepted without independent verification, legitimate supplier payments are redirected to the fraudster.<\/p>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-faq-item\">\r\n        <button type=\"button\" class=\"mas-publication-faq-q\" aria-expanded=\"false\">\r\n          <span>How should a business verify a supplier&rsquo;s bank-detail change?<\/span>\r\n          <span class=\"mas-publication-faq-icon\" aria-hidden=\"true\">+<\/span>\r\n        <\/button>\r\n        <div class=\"mas-publication-faq-a\">\r\n          <p>Document the request, do not rely solely on the requesting email, independently verify the change using a trusted supplier contact or previously established communication channel, obtain approval according to policy, and document the request, verification, approval, and update. Only authorized employees should be able to edit vendor payment information.<\/p>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-faq-item\">\r\n        <button type=\"button\" class=\"mas-publication-faq-q\" aria-expanded=\"false\">\r\n          <span>What are the most common warning signs of vendor payment fraud?<\/span>\r\n          <span class=\"mas-publication-faq-icon\" aria-hidden=\"true\">+<\/span>\r\n        <\/button>\r\n        <div class=\"mas-publication-faq-a\">\r\n          <p>Warning signs include new vendors with limited documentation, duplicate or look-alike vendors, unusual email domains, repeated round-dollar or identical invoice amounts, sequential invoice numbers, last-minute bank-detail changes, urgent requests to bypass approvals, and repeated payments just below approval thresholds. A single red flag is not proof of fraud, but it should trigger additional verification.<\/p>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-faq-item\">\r\n        <button type=\"button\" class=\"mas-publication-faq-q\" aria-expanded=\"false\">\r\n          <span>How can small businesses achieve segregation of duties with limited staff?<\/span>\r\n          <span class=\"mas-publication-faq-icon\" aria-hidden=\"true\">+<\/span>\r\n        <\/button>\r\n        <div class=\"mas-publication-faq-a\">\r\n          <p>Where complete segregation is not possible, compensating controls can be used, such as owner or manager review, independent payment approval, external bookkeeping review, bank transaction alerts, and regular review of vendor changes. User access should also be reviewed when employees change roles or leave.<\/p>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-faq-item\">\r\n        <button type=\"button\" class=\"mas-publication-faq-q\" aria-expanded=\"false\">\r\n          <span>Can AP automation prevent fraud on its own?<\/span>\r\n          <span class=\"mas-publication-faq-icon\" aria-hidden=\"true\">+<\/span>\r\n        <\/button>\r\n        <div class=\"mas-publication-faq-a\">\r\n          <p>No. Technology strengthens controls by automating invoice matching, detecting duplicates, monitoring vendor changes, enforcing approval workflows, and maintaining audit trails. However, automation is not a substitute for internal controls. Poorly configured systems can still allow fraudulent transactions through, and high-risk exceptions should always receive human review.<\/p>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-faq-item\">\r\n        <button type=\"button\" class=\"mas-publication-faq-q\" aria-expanded=\"false\">\r\n          <span>What should happen when a suspicious transaction is identified?<\/span>\r\n          <span class=\"mas-publication-faq-icon\" aria-hidden=\"true\">+<\/span>\r\n        <\/button>\r\n        <div class=\"mas-publication-faq-a\">\r\n          <p>The organization&rsquo;s predefined escalation procedure should be followed: the payment can be placed on hold by an authorized person, the designated investigator reviews the transaction, the supplier is contacted through a trusted channel, and management, legal, or compliance teams are informed as the procedure requires.<\/p>\r\n        <\/div>\r\n      <\/div>\r\n    <\/section>\r\n\r\n    <!-- ================= KEY TAKEAWAYS ================= -->\r\n    <!-- NOTE: Page 30 (Key Takeaways) was missing from the supplied PDF.\r\n         These takeaways are drawn only from content elsewhere in the guide.\r\n         Please compare with the original page 30 before publishing. -->\r\n    <section class=\"mas-publication-section\" id=\"key-takeaways\">\r\n      <p class=\"mas-publication-eyebrow\">Summary<\/p>\r\n      <div class=\"mas-publication-section-head\">\r\n        <h2>Key Takeaways<\/h2>\r\n      <\/div>\r\n      <div class=\"mas-publication-takeaways\">\r\n        <div class=\"mas-publication-takeaway\"><span class=\"mas-publication-takeaway-num\">1<\/span><div><h4>AP fraud can come from anywhere.<\/h4><p>It can involve employees, suppliers, external criminals, or collusion between them.<\/p><\/div><\/div>\r\n        <div class=\"mas-publication-takeaway\"><span class=\"mas-publication-takeaway-num\">2<\/span><div><h4>Protect the whole lifecycle.<\/h4><p>Controls are needed from vendor onboarding through payment authorization, not just at a final review.<\/p><\/div><\/div>\r\n        <div class=\"mas-publication-takeaway\"><span class=\"mas-publication-takeaway-num\">3<\/span><div><h4>Verify vendors before activation.<\/h4><p>Set a minimum documentation requirement, check for duplicates, and approve vendors before they are activated.<\/p><\/div><\/div>\r\n        <div class=\"mas-publication-takeaway\"><span class=\"mas-publication-takeaway-num\">4<\/span><div><h4>Never change bank details on email alone.<\/h4><p>Verify every payment-information change through contact details already on file.<\/p><\/div><\/div>\r\n        <div class=\"mas-publication-takeaway\"><span class=\"mas-publication-takeaway-num\">5<\/span><div><h4>Match before you pay.<\/h4><p>Three-way matching confirms the organization received what it was billed for.<\/p><\/div><\/div>\r\n        <div class=\"mas-publication-takeaway\"><span class=\"mas-publication-takeaway-num\">6<\/span><div><h4>No one controls an entire transaction.<\/h4><p>Segregate duties, and use compensating controls where staff is limited.<\/p><\/div><\/div>\r\n        <div class=\"mas-publication-takeaway\"><span class=\"mas-publication-takeaway-num\">7<\/span><div><h4>A red flag calls for verification.<\/h4><p>A single warning sign is not proof of fraud, but it should always trigger additional review.<\/p><\/div><\/div>\r\n        <div class=\"mas-publication-takeaway\"><span class=\"mas-publication-takeaway-num\">8<\/span><div><h4>Automation supports, not replaces, controls.<\/h4><p>Reconcile, monitor, and escalate; high-risk exceptions still need human review.<\/p><\/div><\/div>\r\n      <\/div>\r\n    <\/section>\r\n\r\n    <!-- ================= CONCLUSION ================= -->\r\n    <section class=\"mas-publication-section\" id=\"conclusion\">\r\n      <p class=\"mas-publication-eyebrow\">Final Thoughts<\/p>\r\n      <div class=\"mas-publication-section-head\">\r\n        <h2>Conclusion<\/h2>\r\n      <\/div>\r\n\r\n      <h3>Protecting Vendor Payments Starts Before the Payment Is Made<\/h3>\r\n\r\n      <p>Accounts payable fraud prevention requires organizations to protect the entire vendor-to-payment lifecycle rather than relying on a final payment review. Fraud can originate during <strong>vendor onboarding, invoice submission, invoice approval, vendor-master maintenance, payment preparation, or payment authorization<\/strong>. For this reason, organizations need a combination of preventive and detective controls.<\/p>\r\n\r\n      <p>Strong vendor onboarding procedures help ensure that only legitimate suppliers enter the accounting system. Invoice validation and two-way or three-way matching help confirm that payments relate to genuine business obligations. Segregation of duties reduces the opportunity for one individual to control multiple stages of a transaction. Payment-detail verification is particularly important because fraudulent bank-account changes can redirect legitimate supplier payments.<\/p>\r\n\r\n      <p>Technology can strengthen these controls by automating invoice matching, detecting potential duplicates, monitoring vendor changes, enforcing approval workflows, and maintaining audit trails. However, automation should support, not replace, sound AP policies and human judgment. High-risk exceptions and unusual transactions still require appropriate investigation.<\/p>\r\n\r\n      <p>Regular reconciliations, vendor reviews, access management, and fraud-risk monitoring provide additional layers of protection. Businesses should also establish clear escalation procedures so suspicious transactions can be placed on hold and investigated quickly.<\/p>\r\n\r\n      <p>Ultimately, the objective is <strong>not to slow down legitimate vendor payments<\/strong>. An effective AP fraud-prevention framework should allow routine, properly authorized transactions to move efficiently while directing unusual or high-risk transactions toward additional scrutiny.<\/p>\r\n\r\n      <div class=\"mas-publication-quote\">\r\n        By combining strong vendor controls, invoice verification, segregation of duties, secure payment procedures, technology, and continuous monitoring, businesses can reduce the likelihood of fraudulent payments while maintaining accurate financial records, protecting cash flow, and strengthening trust with legitimate suppliers.\r\n      <\/div>\r\n    <\/section>\r\n\r\n    <!-- ================= RESOURCES ================= -->\r\n    <section class=\"mas-publication-section\" id=\"resources\">\r\n      <p class=\"mas-publication-eyebrow\">Resources<\/p>\r\n      <div class=\"mas-publication-section-head\">\r\n        <h2>Further Reading &amp; Official Resources<\/h2>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-res-group mas-publication-resources-list\">\r\n        <h3>Fraud Reporting and Payment Security Resources<\/h3>\r\n        <ul>\r\n          <li><a href=\"https:\/\/www.ic3.gov\/\" target=\"_blank\" rel=\"noopener\">FBI Internet Crime Complaint Center (IC3): Report Business Email Compromise<\/a><\/li>\r\n          <li><a href=\"https:\/\/www.cisa.gov\/\" target=\"_blank\" rel=\"noopener\">CISA: Cybersecurity Guidance for Organizations<\/a><\/li>\r\n        <\/ul>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-res-group mas-publication-resources-list\">\r\n        <h3>Fraud Prevention and Internal Control Resources<\/h3>\r\n        <ul>\r\n          <li><a href=\"https:\/\/www.acfe.com\/\" target=\"_blank\" rel=\"noopener\">ACFE: Association of Certified Fraud Examiners<\/a><\/li>\r\n          <li><a href=\"https:\/\/www.coso.org\/\" target=\"_blank\" rel=\"noopener\">COSO: Internal Control Frameworks and Guidance<\/a><\/li>\r\n        <\/ul>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-res-group mas-publication-resources-list\">\r\n        <h3>Official IRS and Government Resources<\/h3>\r\n        <ul>\r\n          <li><a href=\"https:\/\/www.irs.gov\/forms-pubs\/about-form-w-9\" target=\"_blank\" rel=\"noopener\">IRS: About Form W-9, Request for Taxpayer Identification Number<\/a><\/li>\r\n          <li><a href=\"https:\/\/www.irs.gov\/businesses\/small-businesses-self-employed\/recordkeeping\" target=\"_blank\" rel=\"noopener\">IRS: Recordkeeping for Business Taxpayers<\/a><\/li>\r\n          <li><a href=\"https:\/\/www.sba.gov\/counseling\/manage-your-business\/#manage-your-finances\" target=\"_blank\" rel=\"noopener\">SBA: Manage Your Finances, Business Guide<\/a><\/li>\r\n        <\/ul>\r\n      <\/div>\r\n\r\n      <div class=\"mas-publication-res-group mas-publication-resources-list\">\r\n        <h3>Related MASPARTNER Resources<\/h3>\r\n        <ul>\r\n          <li><a href=\"https:\/\/www.maspartner.com\" target=\"_blank\" rel=\"noopener\">MASPARTNER: Outsourced Accounting, Bookkeeping &amp; Payroll<\/a><\/li>\r\n        <\/ul>\r\n      <\/div>\r\n\r\n    <\/section>\r\n\r\n  <\/div><!-- \/.mas-publication-body -->\r\n\r\n  <!-- ================= STICKY DOWNLOAD BUTTON (triggers CF7 modal) ================= -->\r\n  <!-- The href is the real PDF, so the button still works even if JavaScript is blocked. -->\r\n  <div class=\"mas-publication-download\" id=\"mas-publication-download\">\r\n    <a href=\"https:\/\/maspartner.com\/wp-content\/uploads\/2026\/09\/Publications_Accounts_Payable_Fraud_Prevention.pdf.pdf\"\r\n       id=\"mas-publication-download-btn\"\r\n       target=\"_blank\" rel=\"noopener\"\r\n       role=\"button\"\r\n       title=\"Download PDF of this Publication\"\r\n       aria-label=\"Download PDF of this Publication\">\r\n      <svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 3v12\"\/><path d=\"m7 10 5 5 5-5\"\/><path d=\"M5 21h14\"\/><\/svg>\r\n      Download PDF of this Publication\r\n    <\/a>\r\n  <\/div>\r\n\r\n  <!-- ================= CF7 MODAL POPUP ================= -->\r\n  <!-- CF7 Form ID: d62a501 (title: Publication) -->\r\n  <!-- Add an Elementor Shortcode widget BELOW this HTML widget containing:\r\n       [contact-form-7 id=\"d62a501\" title=\"Publication\"] -->\r\n  <div class=\"mas-publication-modal-overlay\" id=\"mas-publication-modal\" role=\"dialog\" aria-modal=\"true\" aria-labelledby=\"mas-publication-modal-title\">\r\n    <div class=\"mas-publication-modal\">\r\n      <button type=\"button\" class=\"mas-publication-modal-close\" id=\"mas-publication-modal-close\" aria-label=\"Close\">&times;<\/button>\r\n      <h3 id=\"mas-publication-modal-title\">Download This E-Guide<\/h3>\r\n      <p>Enter your details below to receive the PDF.<\/p>\r\n      <div id=\"mas-publication-cf7-slot\"><\/div>\r\n    <\/div>\r\n  <\/div>\r\n\r\n  <script>\r\n  (function(){\r\n    var wrap = document.currentScript ? document.currentScript.closest('.mas-publication-wrapper') : null;\r\n    if(!wrap){\r\n      var all = document.querySelectorAll('.mas-publication-wrapper');\r\n      wrap = all[all.length-1];\r\n    }\r\n    if(!wrap) return;\r\n\r\n    var MAS_PDF_URL = 'https:\/\/maspartner.com\/wp-content\/uploads\/2026\/09\/Publications_Accounts_Payable_Fraud_Prevention.pdf.pdf';\r\n\r\n    function masIsRealUrl(url){\r\n      url = (url || '').trim();\r\n      return \/^https?:\\\/\\\/\/i.test(url) || url.charAt(0) === '\/';\r\n    }\r\n    function masOpenUrl(url){\r\n      \/\/ Note: 'noopener' in window.open() always returns null, so detach the opener manually\r\n      var w = window.open(url, '_blank');\r\n      if(w){ try{ w.opener = null; }catch(err){} }\r\n      else { window.location.href = url; } \/\/ popup blocked: open in the same tab instead\r\n    }\r\n\r\n    \/\/ ---------- 0a. MOVE STICKY BUTTON + MODAL TO <body> ----------\r\n    \/\/ Elementor sections can use transforms\/animations, which break position:fixed.\r\n    \/\/ Moving these two elements to <body> keeps them fixed to the screen everywhere.\r\n    function masToBody(id){\r\n      var el = wrap.querySelector('#' + id);\r\n      if(!el){ return document.getElementById(id); }\r\n      Array.prototype.forEach.call(document.querySelectorAll('body > #' + id), function(old){\r\n        if(old !== el && old.parentNode){ old.parentNode.removeChild(old); }\r\n      });\r\n      document.body.appendChild(el);\r\n      return el;\r\n    }\r\n    var downloadWrap = masToBody('mas-publication-download');\r\n    var modal        = masToBody('mas-publication-modal');\r\n    var downloadBtn  = downloadWrap ? downloadWrap.querySelector('#mas-publication-download-btn') : null;\r\n    var cf7Slot      = modal ? modal.querySelector('#mas-publication-cf7-slot') : null;\r\n    var closeBtn     = modal ? modal.querySelector('#mas-publication-modal-close') : null;\r\n\r\n    \/\/ ---------- 0b. CF7: find the Publication form and move it into the modal ----------\r\n    function masFindCf7(){\r\n      var marked = document.querySelector('.mas-publication-cf7-source .wpcf7');\r\n      if(marked) return marked;\r\n      var scope = wrap.closest('[data-elementor-type]') || document;\r\n      var candidates = [scope.querySelectorAll('.wpcf7'), document.querySelectorAll('.wpcf7')];\r\n      for(var c = 0; c < candidates.length; c++){\r\n        for(var i = 0; i < candidates[c].length; i++){\r\n          var f = candidates[c][i];\r\n          if(cf7Slot && cf7Slot.contains(f)) continue;\r\n          if(wrap.compareDocumentPosition(f) & Node.DOCUMENT_POSITION_FOLLOWING){ return f; }\r\n        }\r\n      }\r\n      return null;\r\n    }\r\n\r\n    var cf7Mounted = false;\r\n    function masMountCf7(){\r\n      if(cf7Mounted) return true;\r\n      if(!cf7Slot) return false;\r\n      var cf7Form = masFindCf7();\r\n      if(!cf7Form) return false;\r\n      var widget = cf7Form.closest('.elementor-widget-shortcode') || cf7Form.closest('.elementor-widget');\r\n      cf7Slot.appendChild(cf7Form);\r\n      cf7Form.style.display = 'block';\r\n      if(widget && !widget.textContent.trim()){ widget.style.display = 'none'; }\r\n      \/\/ Initialise only if CF7 has not already done so (prevents double submissions)\r\n      var innerForm = cf7Form.querySelector('form');\r\n      if(innerForm && !innerForm.wpcf7 && window.wpcf7 && typeof window.wpcf7.init === 'function'){\r\n        try{ window.wpcf7.init(innerForm); }catch(err){}\r\n      }\r\n      cf7Mounted = true;\r\n      return true;\r\n    }\r\n\r\n    function masStartCf7Polling(){\r\n      var attempts = 0;\r\n      var timer = setInterval(function(){\r\n        attempts++;\r\n        if(masMountCf7() || attempts > 100){ clearInterval(timer); }\r\n      }, 100);\r\n    }\r\n    \/\/ Run after CF7 has initialised its own forms on DOMContentLoaded\r\n    if(document.readyState === 'loading'){\r\n      document.addEventListener('DOMContentLoaded', function(){ setTimeout(masStartCf7Polling, 0); });\r\n    } else {\r\n      setTimeout(masStartCf7Polling, 0);\r\n    }\r\n\r\n    \/\/ ---------- 0c. MODAL OPEN \/ CLOSE ----------\r\n    function masOpenModal(){\r\n      modal.classList.add('mas-publication-modal-open');\r\n      var first = modal.querySelector('input[type=\"text\"], input[type=\"email\"], .mas-publication-modal-close');\r\n      if(first){ try{ first.focus(); }catch(err){} }\r\n    }\r\n    function masCloseModal(){\r\n      if(modal){ modal.classList.remove('mas-publication-modal-open'); }\r\n      if(downloadBtn){ try{ downloadBtn.focus(); }catch(err){} }\r\n    }\r\n\r\n    if(downloadBtn){\r\n      downloadBtn.addEventListener('click', function(e){\r\n        e.preventDefault();\r\n        e.stopPropagation();\r\n        if(modal && masMountCf7()){\r\n          masOpenModal();\r\n        } else {\r\n          \/\/ Safety net: no CF7 form on the page, so open the PDF directly\r\n          masOpenUrl(MAS_PDF_URL);\r\n        }\r\n      }, true); \/\/ capture phase: fires before Elementor handlers\r\n    }\r\n\r\n    if(modal){\r\n      modal.addEventListener('click', function(e){\r\n        var t = e.target;\r\n        if(t === modal){ masCloseModal(); return; }\r\n        if(t.closest && t.closest('.mas-publication-modal-close')){\r\n          e.preventDefault(); masCloseModal(); return;\r\n        }\r\n        var pdfLink = t.closest ? t.closest('a.mas-publication-pdf-link') : null;\r\n        if(pdfLink){\r\n          e.preventDefault(); e.stopPropagation();\r\n          masOpenUrl(MAS_PDF_URL);\r\n        }\r\n      }, true);\r\n    }\r\n    document.addEventListener('keydown', function(e){\r\n      if((e.key === 'Escape' || e.key === 'Esc') && modal && modal.classList.contains('mas-publication-modal-open')){\r\n        masCloseModal();\r\n      }\r\n    });\r\n\r\n    \/\/ ---------- 0d. AFTER SUCCESSFUL CF7 SUBMISSION: SHOW DOWNLOAD LINK ----------\r\n    document.addEventListener('wpcf7mailsent', function(event){\r\n      if(!modal || !event.target || !modal.contains(event.target)) return; \/\/ only our form\r\n      var modalInner = modal.querySelector('.mas-publication-modal');\r\n      if(!modalInner) return;\r\n      modalInner.innerHTML = '<button type=\"button\" class=\"mas-publication-modal-close\" aria-label=\"Close\">&times;<\/button>'\r\n        + '<h3 style=\"color:#16161a;\">Thank You!<\/h3>'\r\n        + '<p style=\"color:#55555c;\">Your download is ready.<\/p>'\r\n        + '<a href=\"' + MAS_PDF_URL + '\" class=\"mas-publication-pdf-link\" target=\"_blank\" rel=\"noopener\">Download PDF Now<\/a>';\r\n      var link = modalInner.querySelector('.mas-publication-pdf-link');\r\n      if(link){ try{ link.focus(); }catch(err){} }\r\n    }, false);\r\n\r\n    \/\/ ---------- 1. IMAGES: show uploaded image, else keep the HTML diagram ----------\r\n    wrap.querySelectorAll('.mas-publication-visual').forEach(function(v){\r\n      var img = v.querySelector('img');\r\n      if(!img) return;\r\n      if(!masIsRealUrl(img.getAttribute('src'))) return; \/\/ placeholder not replaced yet\r\n      function masImgOk(){ if(img.naturalWidth > 0){ v.classList.add('mas-img-ok'); } }\r\n      if(img.complete){ masImgOk(); } else { img.addEventListener('load', masImgOk); }\r\n    });\r\n\r\n    \/\/ ---------- 2. SMOOTH SCROLL FOR TOC ----------\r\n    var OFFSET = 70;\r\n    var tocLinks = wrap.querySelectorAll('.mas-publication-toc a[href^=\"#\"]');\r\n    tocLinks.forEach(function(link){\r\n      link.addEventListener('click', function(e){\r\n        var id = link.getAttribute('href').slice(1);\r\n        var target = wrap.querySelector('#' + (window.CSS && CSS.escape ? CSS.escape(id) : id))\r\n                  || document.getElementById(id);\r\n        if(target){\r\n          e.preventDefault();\r\n          e.stopPropagation();\r\n          var top = target.getBoundingClientRect().top + window.pageYOffset - OFFSET;\r\n          window.scrollTo({ top: top, behavior: 'smooth' });\r\n          if(history.replaceState){ history.replaceState(null, '', '#' + id); }\r\n        }\r\n      }, true);\r\n    });\r\n\r\n    \/\/ ---------- 3. ACTIVE TOC HIGHLIGHT ON SCROLL ----------\r\n    var sections = wrap.querySelectorAll('.mas-publication-section[id]');\r\n    function masSetActive(){\r\n      var pos = window.pageYOffset + OFFSET + 10;\r\n      var currentId = null;\r\n      sections.forEach(function(sec){\r\n        var secTop = sec.getBoundingClientRect().top + window.pageYOffset;\r\n        if(secTop <= pos){ currentId = sec.getAttribute('id'); }\r\n      });\r\n      tocLinks.forEach(function(l){\r\n        if(currentId && l.getAttribute('href') === '#' + currentId){\r\n          l.classList.add('mas-toc-active');\r\n        } else {\r\n          l.classList.remove('mas-toc-active');\r\n        }\r\n      });\r\n    }\r\n    var ticking = false;\r\n    window.addEventListener('scroll', function(){\r\n      if(!ticking){\r\n        window.requestAnimationFrame(function(){ masSetActive(); ticking = false; });\r\n        ticking = true;\r\n      }\r\n    }, { passive: true });\r\n    masSetActive();\r\n\r\n    \/\/ ---------- 4. FAQ ACCORDION ----------\r\n    wrap.querySelectorAll('.mas-publication-faq-q').forEach(function(btn){\r\n      btn.addEventListener('click', function(e){\r\n        e.preventDefault();\r\n        e.stopPropagation();\r\n        var item = btn.closest('.mas-publication-faq-item');\r\n        var panel = item.querySelector('.mas-publication-faq-a');\r\n        var isOpen = item.classList.contains('mas-faq-open');\r\n        if(isOpen){\r\n          panel.style.maxHeight = null;\r\n          item.classList.remove('mas-faq-open');\r\n          btn.setAttribute('aria-expanded', 'false');\r\n        } else {\r\n          item.classList.add('mas-faq-open');\r\n          panel.style.maxHeight = panel.scrollHeight + 'px';\r\n          btn.setAttribute('aria-expanded', 'true');\r\n        }\r\n      }, true);\r\n    });\r\n    window.addEventListener('resize', function(){\r\n      wrap.querySelectorAll('.mas-publication-faq-item.mas-faq-open').forEach(function(item){\r\n        var panel = item.querySelector('.mas-publication-faq-a');\r\n        panel.style.maxHeight = panel.scrollHeight + 'px';\r\n      });\r\n    });\r\n\r\n    \/\/ ---------- 5. MOBILE CLEARANCE FOR STICKY PDF BAR ----------\r\n    function masMobilePad(){\r\n      var body = wrap.querySelector('.mas-publication-body');\r\n      if(!body) return;\r\n      body.style.paddingBottom = (window.innerWidth <= 768) ? '84px' : '';\r\n    }\r\n    masMobilePad();\r\n    window.addEventListener('resize', masMobilePad);\r\n\r\n    \/\/ ---------- 6. FORCE LINKS TO OPEN ON CLICK (Elementor intercepts events) ----------\r\n    function masForceClick(selector, newTab){\r\n      document.querySelectorAll(selector).forEach(function(el){\r\n        el.addEventListener('click', function(e){\r\n          e.stopPropagation();\r\n          var href = (this.getAttribute('href') || '').trim();\r\n          e.preventDefault();\r\n          if(!masIsRealUrl(href)){ return; } \/\/ placeholder not replaced yet\r\n          if(newTab){\r\n            masOpenUrl(href);\r\n          } else {\r\n            window.location.href = href;\r\n          }\r\n        }, true); \/\/ useCapture = true: fires before Elementor's bubble-phase handlers\r\n      });\r\n    }\r\n\r\n    masForceClick('.mas-publication-resources-list a', true);\r\n  })();\r\n  <\/script>\r\n\r\n<\/div><!-- \/.mas-publication-wrapper -->\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-668a9bb e-flex e-con-boxed sc_layouts_column_icons_position_left e-con e-parent\" data-id=\"668a9bb\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f5c9006 sc_fly_static elementor-widget elementor-widget-shortcode\" data-id=\"f5c9006\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\">\n<div class=\"wpcf7 no-js\" id=\"wpcf7-f20093-o1\" lang=\"en-US\" dir=\"ltr\" data-wpcf7-id=\"20093\">\n<div class=\"screen-reader-response\"><p role=\"status\" aria-live=\"polite\" aria-atomic=\"true\"><\/p> <ul><\/ul><\/div>\n<form action=\"\/en-us\/wp-json\/wp\/v2\/publications\/24450#wpcf7-f20093-o1\" method=\"post\" class=\"wpcf7-form init\" aria-label=\"Contact form\" novalidate=\"novalidate\" data-status=\"init\">\n<fieldset class=\"hidden-fields-container\"><input type=\"hidden\" name=\"_wpcf7\" value=\"20093\" \/><input type=\"hidden\" name=\"_wpcf7_version\" value=\"6.2.2\" \/><input type=\"hidden\" name=\"_wpcf7_locale\" value=\"en_US\" \/><input type=\"hidden\" name=\"_wpcf7_unit_tag\" value=\"wpcf7-f20093-o1\" \/><input type=\"hidden\" name=\"_wpcf7_container_post\" value=\"0\" \/><input type=\"hidden\" name=\"_wpcf7_posted_data_hash\" value=\"\" \/><input type=\"hidden\" name=\"_wpcf7_recaptcha_response\" value=\"\" \/>\n<\/fieldset>\n<p><label> Your Name<br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-name\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" autocomplete=\"name\" aria-required=\"true\" aria-invalid=\"false\" value=\"\" type=\"text\" name=\"your-name\" \/><\/span> <\/label>\n<\/p>\n<p><label> Your Email<br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-email\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-email wpcf7-validates-as-required wpcf7-text wpcf7-validates-as-email\" autocomplete=\"email\" aria-required=\"true\" aria-invalid=\"false\" value=\"\" type=\"email\" name=\"your-email\" \/><\/span> <\/label>\n<\/p>\n<p><label> Phone Number (Optional)<br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-phone\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-tel wpcf7-text wpcf7-validates-as-tel\" autocomplete=\"tel\" aria-invalid=\"false\" value=\"\" type=\"tel\" name=\"your-phone\" \/><\/span> <\/label>\n<\/p>\n<p><input class=\"wpcf7-form-control wpcf7-submit has-spinner\" type=\"submit\" value=\"Download Now\" \/>\n<\/p><div class=\"wpcf7-response-output\" aria-hidden=\"true\"><\/div>\n<\/form>\n<\/div>\n<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-001616c e-flex e-con-boxed sc_layouts_column_icons_position_left e-con e-parent\" data-id=\"001616c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3b35fd0 sc_fly_static elementor-widget elementor-widget-html\" data-id=\"3b35fd0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t\t<!--\r\n============================================================\r\n  MASPARTNER \/ MERCURIUS \u2014 STANDALONE CTA BLOCK\r\n  \"Need Help Getting Your Books Reconciled?\"\r\n  Paste this entire block into its own WordPress \/ Elementor\r\n  \"Custom HTML\" block (separate from the main publication).\r\n============================================================\r\n  This CTA button links to:\r\n    https:\/\/maspartner.com\/en-us\/free-consultation\/\r\n  (Update the href on the .mas-cta-btn anchor if this URL ever changes.)\r\n============================================================\r\n-->\r\n\r\n<div class=\"mas-cta-wrapper\">\r\n\r\n  <style>\r\n    .mas-cta-wrapper{\r\n      --mas-gold:#fabc17;\r\n      --mas-dark-gold:#cfa434;\r\n      --mas-black:#000000;\r\n      --mas-soft:#fbf7ec;\r\n      font-family:inherit;\r\n      box-sizing:border-box;\r\n      width:100%;\r\n    }\r\n    .mas-cta-wrapper *,\r\n    .mas-cta-wrapper *::before,\r\n    .mas-cta-wrapper *::after{box-sizing:border-box;}\r\n\r\n    .mas-cta-box{\r\n      background:var(--mas-soft);\r\n      border:1px solid #f0e6c8;\r\n      border-radius:12px;\r\n      padding:44px 34px;\r\n      text-align:center;\r\n      max-width:900px;\r\n      margin:0 auto;\r\n    }\r\n    .mas-cta-box h3{\r\n      font-size:clamp(22px,3.4vw,28px);\r\n      font-weight:800;\r\n      margin:0 0 16px;\r\n      color:var(--mas-black);\r\n      line-height:1.25;\r\n    }\r\n    .mas-cta-box p{\r\n      font-size:16px;\r\n      line-height:1.7;\r\n      max-width:640px;\r\n      margin:0 auto 26px;\r\n      color:#46464c;\r\n    }\r\n    .mas-cta-btn{\r\n      display:inline-block;\r\n      background:var(--mas-gold);\r\n      color:var(--mas-black);\r\n      font-weight:800;\r\n      font-size:15px;\r\n      letter-spacing:.2px;\r\n      padding:15px 38px;\r\n      border-radius:8px;\r\n      text-decoration:none;\r\n      cursor:pointer;\r\n      position:relative;\r\n      z-index:10;\r\n      pointer-events:auto;\r\n      transition:background .15s,color .15s;\r\n    }\r\n    .mas-cta-btn:hover{background:var(--mas-dark-gold);color:#ffffff;}\r\n\r\n    @media (max-width:768px){\r\n      .mas-cta-box{padding:32px 22px;}\r\n      .mas-cta-btn{display:block;width:100%;padding:15px 20px;}\r\n    }\r\n  <\/style>\r\n\r\n  <div class=\"mas-cta-box\">\r\n    <h3>Need Help Getting Your Books Reconciled?<\/h3>\r\n    <p>MASPARTNER helps small businesses streamline bookkeeping, accounting, payroll, tax compliance, and financial reporting. Our team of CPAs and accounting professionals can take reconciliation, and every other bookkeeping function, entirely off your plate.<\/p>\r\n    <a class=\"mas-cta-btn\" href=\"https:\/\/maspartner.com\/en-us\/free-consultation\/\" target=\"_blank\" rel=\"noopener\">Book a Free Consultation Today<\/a>\r\n  <\/div>\r\n\r\n  <script>\r\n  (function(){\r\n    \/\/ Force the CTA button to open on click (Elementor intercepts clicks in the\r\n    \/\/ bubble phase; a capture-phase handler fires first and wins).\r\n    var wrap = document.currentScript ? document.currentScript.closest('.mas-cta-wrapper') : null;\r\n    if(!wrap){\r\n      var all = document.querySelectorAll('.mas-cta-wrapper');\r\n      wrap = all[all.length-1];\r\n    }\r\n    if(!wrap) return;\r\n    wrap.querySelectorAll('.mas-cta-btn').forEach(function(el){\r\n      el.addEventListener('click', function(e){\r\n        e.stopPropagation();\r\n        var href = this.getAttribute('href');\r\n        if(!href || href === '#' || href.charAt(0) === '['){ e.preventDefault(); return; }\r\n        e.preventDefault();\r\n        window.open(href, '_blank', 'noopener,noreferrer');\r\n      }, true); \/\/ capture phase\r\n    });\r\n  })();\r\n  <\/script>\r\n\r\n<\/div><!-- \/.mas-cta-wrapper -->\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Accounts Payable Fraud Prevention: How Businesses Can Protect Vendor Payments Understanding Vendor Fraud, Business Email\u2026<\/p>\n","protected":false},"featured_media":24462,"template":"elementor_header_footer","class_list":["post-24450","publications","type-publications","status-publish","has-post-thumbnail","hentry"],"_links":{"self":[{"href":"https:\/\/maspartner.com\/en-us\/wp-json\/wp\/v2\/publications\/24450","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/maspartner.com\/en-us\/wp-json\/wp\/v2\/publications"}],"about":[{"href":"https:\/\/maspartner.com\/en-us\/wp-json\/wp\/v2\/types\/publications"}],"version-history":[{"count":9,"href":"https:\/\/maspartner.com\/en-us\/wp-json\/wp\/v2\/publications\/24450\/revisions"}],"predecessor-version":[{"id":24463,"href":"https:\/\/maspartner.com\/en-us\/wp-json\/wp\/v2\/publications\/24450\/revisions\/24463"}],"wp:attachment":[{"href":"https:\/\/maspartner.com\/en-us\/wp-json\/wp\/v2\/media?parent=24450"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}