PayeeShield

Invoice fraud check for small business

The invoice is real.
The bank account isn't.

Forward any supplier invoice or bank change email. Get pay, hold or call first, with reasons, before money moves.

Built for bookkeepers who pay supplier bills for many small businesses every week PayHoldCall first
Brightline Packaging
Supplier packaging
1223 Lindman Street
Austin, TX 78701
Invoice
#4471 · Nov 3, 2026
Old bank: ••••1234 · First Texas Bank
New bank: ••••9876 · online bank, opened 9 days ago
DescriptionQtyAmount
Corrugated boxes, 40×301,200$14,280.00
Pallet delivery3$540.00
HOLD, DO NOT PAY
⌂Bank details changed
@Lookalike sender domain: brightline-packagng.com
↩Replies go to a different address
Verdict: Hold
Call Brightline first on the number from your records, never the one in the email. Ask them to read you the last 4 digits of the new account.

The scammer writes perfectly now.

AI writes supplier emails with the right logo, the right invoice number and no typos, in any language. The giveaways hide in the domain, the headers and the bank details, which nobody checks before every payment. One fake invoice can wipe out a month of profit, and a wire is very hard to get back.

How it works

1 · Forward

You get your own address, like acme@check.payeeshield.com. Forward any supplier email or invoice to it.

2 · We check

Sender, lookalike domains, domain age, reply-to address, and the bank account compared with past invoices on file.

3 · You get a verdict

Pay, hold or call first, with the reasons in plain words, a callback script and a dated log of every check.

Three verdicts

Pay

No bank change. Known sender, old domain, clean headers, consistent with past invoices.

Call first

The bank details changed, or something is unclear. Call the supplier on a number you already have before paying.

Hold

Lookalike or brand-new domain, reply-to trap, or failed email authentication on a bank change. Do not pay.

Lookalike domains

.co instead of .com, “rn” instead of “m”, a missing letter.

Domain age

A supplier domain registered last week is a red flag.

Reply-to traps

The email shows your supplier, but replies go somewhere else.

Bank change vs history

New account, new bank, new country, different account holder.

For bookkeepers: one plan, all your clients

You pay supplier bills for dozens of businesses, and you're the one blamed when a payment goes to the wrong account. Get one forwarding address per client, unlimited checks, and a dated report you can send to each client to show the check was done.

Partner program: 20% recurring commission on every business you refer.

Pricing

Free
$0
  • 5 checks per month
  • Pay, hold or call first with reasons
  • Callback script
Business
$49/month
  • 100 checks per month
  • Bank details compared with past invoices
  • Alerts on any bank change
  • Up to 3 users, dated log
Bookkeeper
$199/month
  • Up to 25 client businesses
  • Unlimited checks
  • One forwarding address per client
  • Reports ready to send to clients
  • Priority review of hold verdicts

Pay yearly and get 12 months for the price of 10.

What a verdict is, and isn't

  • A verdict is advice, not a guarantee. The callback to a number you already know stays the final check, and you keep the decision.
  • We never hold, touch or move money.
  • We can't see inside your supplier's mailbox. If their real account was hacked, the email can look perfect, so any bank change gets at least Call first.
  • Forwarded emails are kept 30 days, never shared, never used to train AI models. You can delete them anytime.

Questions

“I'd spot a fake invoice myself.”

The spelling-mistake test is gone: AI writes in your supplier's exact tone. The giveaways are in the domain and the headers.

“We're too small to be targeted.”

Small businesses are targeted precisely because one person reads the email and pays, with no second check.

“What if you say pay and it's fraud?”

Pay only happens when nothing about the bank details changed. Any change gets Call first or Hold.

“I don't want to share my emails.”

You only forward the supplier emails you choose. Nothing else in your inbox is read.

Forward the next one before you pay.

Join the early list and get your forwarding address. The first 5 checks are free.

Get my forwarding address