Enter your idea

I note that requests for this functionality date back as far as 2016. This suggests that Xero has not treated this enhancement as a priority, despite the potential fraud and governance risks associated with changes to creditor bank account details.

Given that similar controls are available for staff bank account changes, it would be reasonable to expect equivalent functionality for creditor bank account details to help ensure that any amendments are appropriately verified and authorised by business owners.

If the option to change staff bank account details is available, the same functionality should also be made available for creditor bank details. This will ensure that any changes can be verified and confirmed by the business owners.

With the introduction of Bill Payments in Xero this must be addressed urgently (within Xero). If an employee's bank details change, all Payroll Admin's are notified because at Xero "we care about your security and want to make sure all changes to [employee] bank account details are intentional." It appears Xero does not place as much importance about security in relation to Supplier payments. There are third party tools available but this really isn't adequate when Xero is offering Bill Payments from within Xero. Notifying the user who made the change "is by design and cannot be changed within Xero." - this may be to reduce the number of emails pinging around, and that's valid. If this is the case, I suggest implementing whereby up to say four email addresses receive the Alert.

Been following this thread. The bit that stuck with me is the notification going to whoever made the change, which is fairly useless if you're the manager.

I'm a developer in Brisbane and I've built a tool that does this. Connects to Xero, checks contact bank details every 15 minutes, emails whoever you nominate when they change. Not the person who edited it. It also flags when the account name stops matching the contact name, and tells you if you currently owe that supplier money. Keeps a log you can export as a CSV if an auditor wants every bank detail change for the year.

It's new and I've only tested it on demo data, so I'd rather hear from people who actually do this work than keep guessing. If anyone's willing to try it and tell me what's wrong with it, I'll give it to you free. support@ledgerwatch.app.

Not affiliated with Xero.

In a small company I think that the ability for the owner to be able to see any amendments made to bank details is a very important internal control.

I've been following this feature request for years and I'm surprised it still hasn't been implemented.

This is such an important internal control for businesses and accounting firms. The right people should be notified when supplier bank details change, not just the user who made the change.

We recently developed a Xero Connected App called "VendorAlert" to address this gap. It allows businesses to nominate who receives notifications whenever contact bank or payment details change, with a complete audit history of what changed, who made the change and when.

Hopefully Xero implements this natively one day, but in the meantime we're pleased to have a solution available for businesses that need it today.

This has been raised as critical and supported so many times. Perhaps Xero needs to take some of the next price increase and invest it in this request.

Super important ! Please implement it

If a staff member changes a bank account for a creditor, the confirmation email (automatic xero alert) should be sent to that person (as it is now), but also to another person. This would make sure a check is in place to verify the bank details are correct, and not a fraudulent change. 99% of the time it is probably correct, but this would help fraud.

When we change a bank account currently only the user that makes the changes gets a notification which is a security weakness. We need all users or at the very least the main administrator or Finance Manager to be notified of changes.

This would make a huge difference to replace what can be a messy and time consuming verification process to satisfy policy and audit requirements

For audit and fraud detection this is a basic and standard need.

And to combat lack of separation of duties in small firms

Surely to reduce the risk of fraud and error it is a necessity to have this functionality otherwise the only person being notified of the change is the person who initiated it.

Great enhancement from an audit perspective - please can you expedite this

Could we please add this feature? It is very important for security!

I honestly thought this was already happening, until I changed a bank account today and it has only notified me. Needs to be across all payment parts including payroll. Currently anyone can update an account and we could be paying them alot of money. BASIC SECURITY.

This is just basic security!

This should be granular for all payments that can be generated - payroll, super, suppliers etc. Simple fraud is someone altering details and generating payments which look genuine, or are mixed in with other payments in an ABA file or similar.

It has been a glaring hole for years. We have had to remove the ability from multiple staff members to do this, as we cannot be covered for fraud insurance without this basic functionality.

This change needs to be for Supplier and Payroll bank accounts. Thanks

Agree with Les, disappointing this hasnt been addressed.