Clear Path step · Business · No money moves on one message
Use your bank's own fraud controls
Why it matters: Banks offer controls that stop fraud at the last step, but they're often off until you ask for them.
On your path if you picked “Trades and field services”, “Education and childcare” or “Something else” for “What's your industry?”, or you picked “We pay vendors by transfer, ACH or wire” for “What runs your business?”.
Do it
- Ask your bank which fraud controls it offers small businesses.
- Give each user their own login with the least authority they need.
- Turn on dual approval for wires, ACH batches and new payees.
- Turn on positive pay for checks and ACH debit blocks or filters.
- Use a separate account for payroll.
Check it worked: Your business bank portal has per-user roles, dual approval for wires and new payees, payment alerts, and positive pay or ACH debit blocks where offered.
Simply put
Your bank's fraud controls are like a second lock the bank supplies but leaves in the drawer. Dual approval inside the portal means one stolen login, or one fooled person, can't send a wire alone.
In detail
Dual approval inside the bank portal enforces the two-person rule even if your email is fully compromised, which an internal policy alone can't.
Points toward the Long View: a two-person rule enforced by the bank, even if your email is compromised.