Verify vendor bank changes before the next ACH.
BankChangeGuard turns a vendor's “we changed our bank” request into a structured callback verification, confirmed with the previously-verified contact and documented in an exportable audit record, so your bookkeeper can review it before deciding whether to release, hold, or escalate the next ACH.
BankChangeGuard does not make payment-release decisions, guarantee fraud prevention, verify bank ownership independently, or provide legal, accounting, insurance, Nacha, or compliance advice.
A vendor bank change is small until it becomes the payment you cannot get back.
According to the FBI IC3 2024 Internet Crime Report, reported business-email-compromise losses totaled $2.77 billion across 21,442 complaints in 2024 (an average of roughly $129,000 per reported incident). Vendor bank-change fraud is one common BEC pattern, where a "our bank has changed" email is not verified out-of-band.
Email callbacks get lost
A reply-to-the-vendor email goes through the same inbox the attacker just compromised. There's no out-of-band proof anyone actually verified the new account.
Screenshots aren't an audit trail
Pasting a phone-call note or a screen capture into a QuickBooks vendor record is not the structured, timestamped evidence Nacha Phase 2 expects.
Vendor-master changes happen before payment
By the time the next Bill Pay run goes out, the bank account on file has already been swapped. The fraudulent ACH has settled before anyone notices.
June 22 puts documented controls on the table
Nacha Phase 2 removes the volume threshold from Phase 1. Every ACH originator, regardless of size, needs risk-based account-ownership verification.
The deadline
June 22, 2026 is close enough to build the control now.
“As June 19 is a federal holiday, the practical effective date for these two rules will be the next banking day — Monday, June 22, 2026. All affected parties are encouraged to become compliant with these rules as soon as possible, but no later than June 22, 2026.”
How it works
Four steps. No new tools for your vendors. No ACH-rail integration.
- Step 1
Connect QuickBooks Online
OAuth into QBO once. Read-only on vendor and bill scopes. We don't touch your bank credentials or originate ACH.
- Step 2
Log the change request
When a vendor emails or calls claiming new bank details, log it in BankChangeGuard: pick the vendor from your synced QuickBooks list and enter the new account's last 4. That starts the verification.
- Step 3
Verify with the previously-approved contact
A one-time code goes by email to the contact you verified before the change request, never the channel that asked for the change. Email callback is a workflow control, not independent bank-account ownership verification; for high-value or suspicious changes, add controls such as a known-number phone call or dual approval.
- Step 4
Export the audit record for review
Timestamps, channel, attestation text, evidence hash. Export a structured audit record for your internal review before you decide whether to release, hold, or escalate the payment.
Who this is for
Built for the bookkeeper, not the enterprise procurement team.
Many vendor-verification platforms (such as Trustpair, Eftsure, and PaymentWorks) are oriented toward larger procurement and AP teams and are typically enterprise-tier and quote-based. Ramp ships AP Agents natively, but only to Ramp customers. BankChangeGuard is designed for SMB bookkeepers and CPA firms using QuickBooks Online.
BankChangeGuard sits in the gap: a fractional bookkeeper or 3-25-person CPA firm running QuickBooks Online Bill Pay for their clients, who needs the same audit-evidence story at SMB pricing without booking a vendor demo.
Pricing
One seat. One QBO company. Flat.
- Bookkeeper-logged bank-change requests
- Callback verification (email)
- Exportable audit-record PDF
- QuickBooks Online OAuth integration
Connect QuickBooks Online first if you have not yet. Renews automatically at $99/month until you cancel; cancel anytime through the Polar customer portal linked from your dashboard, effective at the end of the current period. Payments, invoices, taxes, refunds, and chargebacks are handled by Polar as Merchant of Record. Xero and BILL integrations are planned after the QuickBooks launch.
FAQ
Questions a CPA partner will ask first.
Is BankChangeGuard a payment processor?
Does BankChangeGuard stop ACH payments automatically?
Does this replace my bank's Nacha compliance requirements?
Is BankChangeGuard officially Nacha-certified?
What vendor data do you store?
Can I use BankChangeGuard with multiple QBO clients?
Give every bank change a paper trail before payment leaves.
We'll email you the day BankChangeGuard goes live in the QuickBooks App Store. No spam, no roadmap newsletters.