Settings and activity
1 result found
-
136 votes
Appreciate wanting an update from us here, everyone. We know that having more visibility of when a supplier’s bank account details change is important to you and understand that there are some security concerns around this. This is something our product teams are aware of the appetite for, however we want to be upfront that this feature is not planned in the near future.
While not a direct solution to what you’re asking here, it’s worth noting that the ability to change supplier’s bank account details is limited by the bank account admin permission. Advisors will have access to the Assurance dashboard where you’ll be able to get an easy view of any Contacts whose bank account details have been edited, and you can also view this information running the History and Notes report.
An error occurred while saving the comment An error occurred while saving the comment 
Ian McIntosh
commented
It's a no brainer way to protect businesses. Currently notifying the person who changes the bank details is like telling a burglar you've successfully set yourself up to burgle a house. The notification MUST go to another Admin. In my analogy, the homeowner, so they can take precautions.
I lost almost $2K to this issue as a below average bookkeeper changed a contact's bank details to another supplier's bank details. The bookkeeper was notified but I wasn't. Unfortunately, the recipient of the funds spent the money before we found out and we could only claim about $200 back from them after 12 months and a lot of trouble. We're a not for profit and the auditor was shocked by this weakness in Xero.
My work around now is to use an email rule in the staff member's Outlook program that auto forwards the Xero bank account change email to me. This isn't foolproof though.
Please safe guard businesses by having the supplier bank account change email go to both the user and the nominated admin(s). It just commonsense.
Ian McIntosh
supported this idea
·
Update - my new work around is to add an email rule at the Office 365 - Exchange Admin level. That way any email from Xero re a Bank Account change comes direct to me. If you use a bookkeeper that logs in with their own email I suggest you make them login with an email that you control.
The above only covers Contacts that have existing bank details changed.
As you don't get emails when new or existing Contacts have bank details added for the first time you really need to run the "History and Notes" screen report. (Accounting menu --> Advanced --> History and notes). In the Item section select "Contact", then search (Ctrl + F) for "bank" and you'll be able to locate all bank account changes with a link to the Contact that was changed.