Verify before you act.

Northwind Supplies

We have changed banks. Please send the payment for invoice 4471 to our new account from today: account name Northwind Supplies Ltd, IBAN GB29 NWBK 6016 1331 9268 19. Our old account is closed, so do not use it. This needs to be settled today to avoid a late fee. Reply to billing@northwind-supplies.example once done.

DemonstrationPayment change

What is asked
send a bank transfer
High risk
What does not fit
New bank details + same-day deadline
Next action
Call on a number you already had

Speak a draft (experimental, optional)

Works only with an installed language supported by this browser. NextAct requests on-device recognition and does not upload or save audio. It does not record calls. Up to 30 seconds and 2,000 characters. Urdu and Roman Urdu produce an Urdu-script draft.

Do not say passwords, PINs or OTPs. People nearby may hear you. You can cancel and erase this draft.

Use guided help without speaking or reading a draft

What a result looks like

DemonstrationReal NextAct output

What’s happening
Hello, this is the accounts team at Northwind Supplies. We have changed banks. Please send the payment for invoice 4471 to our new account from today: account name Northwind Supplies Ltd, IBAN GB29 NWBK 6016 1331 9268 19. Our old account is closed, so do not use it. This needs to be settled today to avoid a late fee. Reply to billing@northwind-supplies.example once done.
A message presenting itself as Northwind Supplies is asking you to send a bank transfer.
High risk
Evidence
- The message combines pressure to act quickly with a request that would be hard to undo. That combination is common in fraud, and it leaves you less time to check.
Unknown: Is the sender actually who they say they are?
Next action
Before you act
Do not proceed yet
Do not do what this asks until you have checked it independently.
Call the person or supplier on a number you already had for them — from a previous invoice, your contacts, or their official site found without using this message.

Show the complete result card

What is happening

A message presenting itself as Northwind Supplies is asking you to send a bank transfer.

This could give someone access to your money or accounts.

What NextAct observes

High risk

Before you act

Do not proceed yet

Do not do what this asks until you have checked it independently.

Safest next step

Call the person or supplier on a number you already had for them — from a previous invoice, your contacts, or their official site found without using this message.
Fraudulent changes of payment details often arrive by email, and every contact detail in the message is chosen by its sender. A call on a number you already had lets you check the change with the supplier before any money moves.

Evidence:: Insufficient
Confidence:: Medium
If this is wrong:: Affects money or accounts

What evidence, confidence and consequence mean here

Evidence

Insufficient

Almost nothing here could be checked against a source independent of the material.

Confidence

Medium

The warning signs come from the material itself — what it says and what it asks. Nothing independent confirmed or ruled them out.

What confidence means

Confidence describes how strongly the available evidence supports this specific assessment. It is not the probability that something is fraudulent.

If this is wrong

Affects money or accounts

Doing what this asks could give someone access to your money or accounts.

Why

Several things NextAct checked do not fit together. Do not act on this as it stands.

The message combines pressure to act quickly with a request that would be hard to undo. That combination is common in fraud, and it leaves you less time to check.
The message says payment details have changed. Real suppliers do change them, which is exactly why this one needs confirming through a contact route you already had.

More warning signs (3)

The message sets a deadline, which reduces the time you have to check it.
NextAct could not independently confirm who this is from.
A change of payment details combined with pressure matches the pattern of invoice-redirection fraud. Confirm it on a number you already had before paying.

What NextAct could not verify

Is the sender actually who they say they are?

Everything else in the message rests on this, and a name in a message is written by whoever sent it.

A synthetic message, rendered by NextAct’s own result components. It is not a real case or a measured result.

What you can check

NextAct Business · Payment Change Guard

Hold the payment until the change is confirmed

Payment Change Guard: a review workflow for the moment a supplier’s bank details change.

Compared with records
Confirmed by a known route
Signed off by a second person
Recorded in the audit trail

A hold is a status inside NextAct Business. It does not block a payment at your bank.

Public Business preview — NextAct Business has not completed independent validation. It supports your payment controls; it does not replace them.

Explore NextAct Business

Sample dataA payment change, compared

Recorded destination

Account name: Northwind Supplies Ltd
Sort code: ••-••-08
Account number: ••••6012

Entered by your organisation. Not independently verified.

Differs from your recordSort code · Account number

Proposed destination

Account name: Northwind Supplies Ltd
Sort code: ••-••-11Changed
Account number: ••••4412Changed

Read from the request.

Independent verification routeThe phone number already on file — never one from the message.
ApprovalWith four-eyes on, a second person signs off before the record changes.

Silence is not a clean bill of health

“Low observed risk” means nothing NextAct checked stood out. It is not proof the request is genuine.

How NextAct describes what it found

Not enough to say
Low observed risk
Elevated
High
Critical

There is no “safe” on this scale.

NextAct’s detection has not yet been validated independently, so you will not see a detection rate here.

Read every limitation