Enter your idea

For those following, a partial work around we have found. We have set a redirect for any email that goes to our staff when they change the Xero bank details to send to the managers. This only works on updating bank details, not adding in new ones unfortunately, but its better than nothing. It would be better if we didnt have to set these rules and it was automatic from Xero like with MYOB.

Our auditors have asked us numerous times to enable this in Xero, not understanding that although it is a basic function of most finance software packages, Xero seems to have been left behind. This should be planned and in the near future. A much better use of resources and feature rollout than the recent changes to archiving in files....

Do Xero's competitors, eg MYOB, QuickBooks or SAe have this functionality?

System generated bank changes (e.g. via 3rd party platforms like Dext, Envoice) get pushed through into Xero without oversight, and without a manual review of the contact history, this won't be picked up.

Is this idea ever going to get into the product roadmap (given it was raised in 2015 and it's now 2025)?

A request to add "Files - Bulk export/print attached files" to product development has been accepted, albeit without a timeline. This function is much more important as it is a key day to day internal control to reduce the likelihood of being scammed.

What is needed for this to move to the Development queue?

A request to add "Files - Bulk export/print attached files" to product development has been accepted, albeit without a timeline. This fuinction is much more important as it is a key day to day internal control to reduce the likelihood of being scammed.

What is needed for this to move to the Development queue?

I agree that more than just the changer needs to be alerted to any changes to bank accounts, this is critical to be able to enhance internal fraud control.

This is how fraud is committed every day in business. A main administrator or group of administrators must receive a message if bank accounts are changed. Please Xero make these vital upgrades for your customers!

This is critical to enhance internal controls and prevent fraudulent activities. If an employee changes a supplier account to their own account, how could this be picked up is only the employee is advised that change has been made?

Also, given the risks of an email account being compromised, it is again important that more than one user can be alerted to a change.

I agree with all comments below, it is critical that this functionality is implemented.

In todays climate, this is super important, it would be good to see this feature actioned

Need more than one person to know when a Bank Account Changes

No feedback from Xero HQ, is this even on their WIP list? If not it certainly should be.

This is critical to enhance internal controls and prevent fraudulent activities.

We are looking at this option as a safety measure.
If someone is working from home, other team members will be updated.
Or, if someone is on leave and their login credentials have been used, the notification will be in their inbox and no one else would know.
If their account has been hacked, then the 3rd party could delete the notification from the inbox with no one knowing.
The notification should also be triggered on a new bank account entry in case a fake supplier has been entered.
In today's cybercrime awareness, we are looking for ways to be more vigilant.

This is a must given the risks of an email account being compromised, there is no point in sending a bank account change to the account that may be fraudulent

Title: Email Settings – Notify all authorised users of bank account changes

Idea: Add the ability to send automatic notifications of supplier bank account changes to all users with Bank Account Admin permissions, or allow account owners to configure which authorised users should receive them.

Purpose: Many organisations (particularly non-profits and community groups) have governance obligations and fraud-prevention protocols requiring oversight from multiple board members. Limiting notifications only to the person making the change prevents proper controls. Allowing notifications to go to all authorised users ensures transparency, accountability, and compliance with governance standards.

I believe it is critical that if new bank account details are entered or changed an email notification is sent to designated users to ensure authenticity. This will assist with reducing the risk of fraud

For an audit perspective and fraud controls this would be invaluable

Important feature that should be standard given the risk of fraud in a business and should be a standard internal control