Trustpair

The solution for thwarting transfer fraud, Trustpair enables automatic control of third parties and secure payments.

In 2022, 50% of companies suffered at least one fraud attempt (Fraud Study 2023 – SAP Opinion Way)  and the health crisis only accentuates the level of insecurity. Faced with this situation, more and more companies are looking to implement solutions and processes designed to limit or eliminate this risk.

The Trustpair solution is the perfect answer to this problem, providing a secure repository for checking a supplier’s RIB prior to payment.

Applium is a reseller and integrator of the Trustpair solution. Through the partnership between Applium and Trustpair, SAP customers will benefit from an interface between the Trustpair solution and their SAP ECC6 or SAP S/HANA environments.

Secure and Simplify Your Supplier RIB Control with Trustpair your Supplier RIBs

Trustpair supported by SAP

In October 2020, the SAP.iO Foundry Paris gas pedal formed its 5th class of start-ups, this time focusing on procurement and purchasing.

Eight European publishers, including four from France, Flowlity, Per Angusta, Trustpair and Winddle, are part of the 10-week acceleration program.

The first 4 promotions of SAP.iO Foundry Paris had been dedicated to young publishers engaged in supply chain, retail distribution, green technologies and human resources management combined with the future.

The start-ups were selected for “their innovative approaches around supply management, user experience and process automation”, explains SAP. As in previous years, these are companies run by experienced teams, with a stable business model and product.

More information about Trustpair and the topic of fake supplier fraud :

SAP connector

Control your third parties natively in SAP:
  • Benefit from all the advantages of the Trustpair solution within your ERP thanks to the SAP connector.
  • Trusptair integrates automatic checking of bank details into SAP ERP.
  • The SAP connector simplifies your task by intelligently filling in empty fields, enriching your supplier data and rendering a binary risk assessment within your ERP.
  • You identify whether the binary risk assessment for your third party is favorable or unfavorable. So, without the need for an external tool or contact, you can make the decision to pay your supplier in complete security.

 

Be alerted to new third parties at risk in SAP ECC6 or SAP S/4HANA :
  • The SAP connector brings you all the value of continuous auditing of your third-party database.
  • Within your ERP, you’ll have access to a 360° view of your third-party database, from which you can filter, classify and select your third parties.
  • You’ll also have access to a detailed, easy-to-read and intuitive third-party file for each of them.
  • This connector between Trustpair and SAP also enables you to be alerted by email whenever a third party is at risk in your database.

False supplier fraud

As a member of the Finance Department, you receive an e-mail from a supplier. He tells you that his bank details have changed, and asks you to take the change into account when paying future invoices. This has now been done, and payments are being made to the new account. However, the supplier contacts you “again” and tells you that he’s still waiting for the invoices to be paid. Confusion sets in as the supplier tells you that his bank details have not changed… You realize that you have just been the victim of a fake supplier fraud.


This is, today, the most prevalent type of fraud. The Euler Hermès DFCG 2020 barometer indicates that false supplier fraud is “cited by 48% of respondents”, topping the sad list. Find out what it is, how to react in the event of proven supplier fraud and, above all, what actions to take to protect yourself.

What is false supplier fraud?

False supplier fraud involves a scammer assuming the identity of a supplier and contacting a corporate customer, informing them of a change in bank details. In this way, any transfer supposed to reach the real supplier actually arrives on the fraudster’s bank account.

The method is formidable, as it makes use of social engineering : the fraudster collects a great deal of data to best usurp the supplier’s identity. The scammer can then manipulate the person he contacts, for example by creating an email address similar to that of the supplier and adopting the same email and invoice formatting.

Fake supplier fraud shares similarities with President fraud, but should not be confused.

False supplier fraud and president fraud: what are the differences?

Both types of scam are based on identity theft and financial fraud, but they differ in their modus operandi. President fraud is the second most cited fraud in the Euler Hermès DFCG 2020 barometer, with 38% of respondents.

President fraud (or FOVI, Faux Ordres de Virement) involves a fraudster impersonating a company executive. He then contacts a strategic person, such as an accountant or a member of the finance department, who is in a position to carry out transfers. He then instructs this person to make an “urgent and confidential” transfer, for some kind of acquisition. To achieve his ends, the fraudster uses manipulation:

  • He is intimidating, threatening, for example, dismissal or legal action if the person discloses the request or delays making the transfer;
  • It’s flattering, insisting on your skills and heaping praise on your crucial role in the company.

In either case, the aim is to get the person to let their guard down and execute the transfer without delay. This type of fraud evolves according to the context and technological advances, with scammers, for example, making increasing use of deepfakes.

Fake supplier fraud and FOVI fraud therefore differ in terms of:

  • The identity and authority of the usurped person ;
  • The speed with which the transfers are made.


If you detect a case of fraud, you need to react immediately.

Proven supplier fraud: how to react?

There are several steps to take:

  1. Contact the spoofed supplier immediately; it’s highly likely that their identity has been spoofed from other companies.
  2. Refer to the relevant authorities, to alert them to this proven supplier fraud.
  3. If the transfer has been made, contact your bank as soon as possible to try to recover the funds.

However, this procedure, known as the “recall transfer”, is limited to SEPA transfer orders in euros, and is subject to different national legislation. It is therefore preferable to put in place measures upstream to limit the risk of counterfeit supplier fraud.  

Fighting fake supplier fraud: apply life-saving gestures

Asking the right questions and analyzing weak signals
Any request from one of your suppliers to change bank details should be considered as a potential bank transfer fraud. If a supplier contacts you with this in mind, you should be suspicious from the outset, and ask yourself the right questions:

  • Do the supplier’s e-mail address and contact details match those of previous exchanges?
  • Are the subject of the e-mail and the name of the attachments familiar?
  • Is the pagination of the invoice similar to previous documents?
  • Does the formatting, style and spelling of the e-mail correspond to previous exchanges?
  • Has this supplier recently changed its bank details?
  • Were you expecting an invoice from this supplier?
  • Are the bank details the same?

This set of questions is part of a fraud prevention process to be set up within the company.

Training and raising team awareness

This type of fraud relies on manipulation rather than cyber-attacks, so it’s employees who are directly targeted. It is therefore necessary to sensitize your teams to the various risks of fraud, by detailing the scenarios, operating modes and reactions to adopt. In this regard, the latest Fraud Study 2021 conducted by Trustpair, Accenture and option Finance reveals that 66% of companies have implemented a team awareness program.

Identifying and mapping risks
In this sense, a risk map is just the thing. It identifies the most at-risk targets, in particular members of the Finance Department, since they are in a position to make transfers. Above all, it details the different levels of threat, at what points in the payment chain they are most likely to occur, and what procedures to follow.

Strengthen supplier control processes
In this respect, it is necessary to systematize the process of double-checking bank details to secure payments. These checks have become a new standard for companies, with 82% of companies carrying out a systematic check when updating a third party, and 75% carrying out a systematic check when establishing a business relationship.For all RIB change requests, you should therefore get into the habit of systematically contacting the supplier.

Automate controls for flawless security
In addition to internal company procedures, it is in your best interest to equip yourself with an anti-fraud solution. Once again, the study carried out by Trustpair, Accenture and Option Finance reveals that only 16% of companies currently have this kind of technological solution. Yet it enables companies to systematically and automatically check supplier identity and bank details, and thus facilitate and secure these processes.

Trustpair is designed with this in mind. This SaaS anti-fraud software checks supplier repository data thanks to its French and international banking access, and alerts you to any anomalies and errors. Its automatic real-time check applies to any change in the third-party database, ensuring you’re protected at all times. With Trustpair, you’ll fight fake supplier fraud.

Trutpair demo film with SAP :

SAP Webinar with our experts

Are you looking for a sympathetic ear to talk about your SAP-related concerns?