Bank change: the invoice goes into quarantine

Now for the serious case. We upload an invoice from Veldtmann, a well-known supplier. At the bottom of the invoice, there is a note: Please use only the new bank details from now on; the previous ones are no longer valid. You can already see in the list that something’s wrong: security quarantine, audit high, and HITL required, meaning a person has to review it. In the Audit tab, you can see why. The audit flags a fraud risk: the invoice explicitly says to use a new bank account and that the previous one is no longer valid. That’s a classic sign of email fraud, for example when someone has taken over a mailbox. Severity eight out of ten, critical. Every finding comes with a recommendation. Here: don’t process the payment based on the document alone, and contact the supplier using verified contact details from earlier correspondence to confirm the change. There’s a second finding too: a payment risk, because the invoice tells you to use a new IBAN and to disregard the previous bank details. From severity level seven onwards, PaperOffice immediately places the document in quarantine. Editing, moving, downloading and deleting are locked; the remaining tabs are inactive. You can still view the connections, but only in read-only mode.