It might be one line from a supplier you've paid for years: "We've changed banks. Please use the new details below for this invoice."
It looks right, and the invoice needs paying. If that email is fake, the money goes to a fraudster. Once it has gone, getting it back isn't up to you.
The check is one phone call. Ring the supplier back on a number you already hold, and don't pay new details until they confirm.
That rule is the heart of this kit, written for whoever presses "pay". There's a call-back script and a bank change log to go with it. If a payment has already gone, there's a plan for the first hour too.
It also sets out the bank reimbursement rules from the Payment Systems Regulator: who they cover, the limits and the time to report. It quotes them from the source and doesn't promise you'll get money back.
£19 · digital download (ZIP file).
Honest scope
This kit is practical help, not legal or financial advice. It can't stop every fraud, and it doesn't decide whether you get money back: your bank does. If money has already gone, call your bank first.
For advice on your own situation, speak to your bank, an accountant or a fraud specialist.
FAQ
Will my bank give the money back?
It depends. The Payment Systems Regulator's reimbursement rules cover individuals, microenterprises and charities, for Faster Payments and CHAPS payments between UK accounts. There's a maximum claim, an optional excess and exceptions. Your bank decides. The guide sets out the rules and who counts as a microenterprise.
Doesn't the bank's name check do this already?
Confirmation of Payee checks the account name you enter. It's a good place to start. The kit suggests treating it as one check and still calling the payee back for any new or changed details.
What if the request comes from our own director?
The guide has a section on requests from "the boss". The same rule applies: call back on the number you already hold for them.
What if our own email was used?
The first hour card covers what to do. For locking down the account, see our Account Lockdown Kit.
What formats are the files?
PDF, Word (.docx) and Excel (.xlsx). They open in Microsoft Office, Google Docs and Sheets, LibreOffice and most PDF readers.
Everything in the download
A ZIP with 7 files: the step-by-step guide (PDF), three Word templates, the bank change log (Excel) and two one-page cards (PDF).
The routine, in four steps
- Click Get the kit and check out. You'll receive a download link after payment.
- Fill in your approval amount and share the payment rule with your team.
- Put the red flags card up, and add the notice to your invoices.
- Log every bank change request and do the call-back before you pay.
Nobody from Secordit needs a call or a meeting with you.
What's inside
- Step-by-step guide (PDF): the one rule, the call-back, red flags, requests from "the boss", Confirmation of Payee, and what to do if you've already paid
- Call-back script (Word): what to say when you ring the payee back, and what to write down
- Payment rule for your team (Word): the rule on one page, with your own approval amount
- Notice for suppliers and customers (Word): wording for your invoices, email signature and website
- Bank change log (Excel): one row per request, with a "Ready to pay?" check that waits for the call-back and any second approval
- Red flags card (PDF): one page to put up by the computer you pay from
- Already paid? First hour card (PDF): who to call, what to keep and how to report it
- Sources list at the end of the guide: the regulator, police reporting service and legislation pages the kit is based on
Who it's for
- Owners, office managers and bookkeepers who set up or make supplier payments
- Sole traders and small teams paid by clients by bank transfer
- Charities and clubs whose treasurer pays the bills
Rules and good practice, clearly labelled
Each step is marked as what the rules say, what Report Fraud advises, or our own suggestion. You can see what comes from a regulator, the police or the law, and what's simply helpful.
About Secordit
Secordit Intelligence was set up in February 2026 by Matthew Protheroe-Hill, its director. Before that, he co-founded Sencode Cyber Security and was a director there from 2019 to 2023. Qualification: BSc (Hons) Cyber Security & Networks (1st Class), Teesside University.
Delivery
Digital download (ZIP file). You'll receive a download link after payment.
Before your next supplier payment, print the red flags card and keep the call-back script open.