Fraud, ACH Risk & Payment Strategy: Rethinking Accounts Payable

For years, accounts payable was viewed as a back-office function. Process invoices. Send payments. Keep things moving.

But that view is quickly becoming outdated.

Today, payment infrastructure sits directly at the intersection of fraud risk, cash management, and financial strategy. And for many organizations, the systems they rely on weren’t designed for the threat landscape finance teams are facing today. 

We sat down with Lindsey Kokosh and Sierre Norton from Corpay to discuss how fraud is evolving, why certain payment types remain vulnerable, and how finance leaders can rethink payment strategy to better protect their businesses.

Here’s what stood out. 

‍Compromised business emails is one of the biggest threats

One of the most common fraud tactics today is also one of the simplest: business email compromise. 

Attackers impersonate vendors or internal stakeholders and request payment changes, often asking finance teams to update bank details for upcoming invoices. The request looks legitimate, arrives at the right moment, and can easily slip through if verification processes aren’t strong.

Once the payment is sent, the money is often gone.

Vendor impersonation works because accounts payable teams are designed to move quickly. When processes rely heavily on email-based communication and manual updates, fraudsters have an opening.

The reality is that many payment workflows still trust email more than they should. At Alta Vista Technology, we see this play out frequently in the field. Fraud attempts often appear legitimate at first glance, especially when payment instructions arrive through familiar communication channels. That’s why stronger verification processes and payment controls are becoming essential parts of modern AP infrastructure.

As AVT CEO, Scott Jackson, explains, the safeguard often comes down to simple verification steps: 

“The only thing that caught it is we require visual verification. If someone requests a change to banking information, we don’t process it over email. We get on a video call and talk it through. In one particular case, that extra step caught the fraud attempt—and it reinforced that from now on, we’re going to be much more vigilant about it.”

Why ACH payments remain vulnerable

ACH is widely used because it’s fast and inexpensive. But those same qualities can also make it risky.

Unlike credit card payments, ACH transfers typically have limited protections once funds are sent. If payment instructions are compromised, whether through vendor impersonation or internal errors, recovering funds can be difficult. 

That doesn’t mean organizations should avoid ACH entirely. But it does mean finance leaders need to think more carefully about how payment types are used. 

Not every payment carries the same level of risk. And not every payment should follow the same process.

‍Fraud prevention is no longer just an IT problem

Historically, fraud prevention sat primarily within IT or security teams.

But payment fraud is changing that dynamic. 

“It’s not a matter of if, it’s a matter of when” - Sierra Norton, Director of Fraud Operations

Because the attack vector often targets payment workflows—vendor onboarding, invoice processing, or bank detail updates — finance teams are now on the front lines. Controllers and CFOs are increasingly responsible for identifying risks within the payment process itself.

This shift is forcing finance organizations to rethink how controls are designed.

The question is no longer just: Is our system secure?

It’s: Is our payment workflow secure?

Payment mix matters more than most teams realize

Another key takeaway from the conversation: payment strategy shouldn’t default to a single method.

Many organizations rely heavily on one payment type, often checks or ACH, without considering the broader implications.

But each payment method has trade-offs:

• Checks are slower and operationally heavy, but they can reduce certain fraud risks.
• ACH is efficient and low-cost, but more vulnerable to compromised payment instructions.
• Cards can introduce additional security protections while also creating opportunities to rebate revenue.

Instead of defaulting to one option, finance teams are starting to think more intentionally about payment mix, choosing the right method based on vendor relationships, payment size, and risk tolerance. 

Payment strategy, in other words, becomes a financial decision, not just an operational one. 

‍It’s time to rethink AP metrics

Many AP teams are still measured on a single metric: cost per invoice.

While efficiency matters, the metric alone doesn’t reflect the full impact of modern payment operations.

Finance leaders are beginning to look at additional dimensions, such as:

• Fraud exposure
• Payment security
• Vendor adoption of digital payments
• Working capital optimization
• Revenue opportunities from card programs

This is where having the right technology and advisory partner matters. Alta Vista Technology helps finance teams evaluate payment infrastructure, optimize vendor payment mix, and implement automation strategies that reduce risk while unlocking financial benefits.

Tools like Corpay’s vendor payment analysis can even estimate the potential rebate revenue organizations may generate by shifting vendors to card payments, turning AP into a source of financial return rather than just a cost center.

When viewed through that lens, accounts payable becomes more than a cost center. It becomes part of a broader financial strategy. 

“[Accounts payable is] kind of like conducting an orchestra. You have these tools to work with, but they're not doing the menial things. They're doing more orchestration of it.” - Lindsey Kokosh, VP, VAR Partner Channel

‍The bigger shift happening in finance

The underlying theme of the conversation was simple: payments are no longer just transactions.

They’re a strategic lever.

Organizations that rethink their payment infrastructure can reduce fraud exposure, improve operational efficiency, and unlock new financial benefits. Those that don’t may find themselves increasingly exposed as fraud tactics evolve.

For finance leaders, the takeaway is clear: the systems and processes behind accounts payable deserve the same level of strategic attention as any other part of the financial stack.

And in today’s environment, that attention can make a meaningful difference.

🎧 Watch the full conversation with experts at Corpay to hear how finance teams are adapting their payment strategies and preparing for the next generation of fraud risks.