Confirmation of Payee for UK business payments
How Confirmation of Payee works when a business sets up suppliers and other beneficiaries, what match results mean, and when to stop before sending money.
Confirmation of Payee checks the name you enter against the name linked to the UK account details you are paying. A match gives useful reassurance, while a close match or no match is a reason to verify the beneficiary before sending. It is not a guarantee that the underlying invoice or payment request is genuine, so businesses should still verify unexpected changes to supplier bank details through an independent trusted channel.
What Confirmation of Payee actually checks
Confirmation of Payee, or CoP, compares the payee name entered by the payer with the name held for the destination sort code and account number. The result can indicate a match, close match or no match. The Payment Systems Regulator expanded coverage so that many payment service providers offering accounts that can send or receive Faster Payments or CHAPS must provide the service, subject to exemptions.
For a business finance team, CoP is most useful when creating or changing a beneficiary. It can catch a mistyped account name and can also expose an invoice-redirection attempt where a fraudster substitutes different bank details.
Business names create legitimate reasons for a close or failed match
The name on an invoice is not always the exact legal account name. A supplier may trade under a brand while the bank account is held by a limited company, partnership or sole trader. The result can also differ if initials, abbreviations or entity suffixes are entered differently. Treat the bank’s response as information to investigate, not as permission to guess.
Ask the supplier for the exact account name used for bank payments and compare it with Companies House or other reliable records where relevant. If the supplier recently changed legal name, our guide to business bank account name changes explains why transition periods can create mismatches.
A no-match warning should change the payment process
Do not simply override a no-match warning because an invoice looks genuine. Contact the supplier using a phone number or contact route you already trust, not the number supplied in the same email that changed the bank details. For a large payment, consider a second-person approval step and record who verified the change.
Invoice-redirection scams specifically target businesses at the moment bank details are updated. Our guide to invoice-redirection scams explains the fraud pattern and why independent verification matters.
CoP is not a check on the commercial purpose of the payment
A name match does not prove that the invoice is valid, the supplier really requested payment or the person who emailed you is genuine. It only checks the relationship between the name and destination account details. A fraudster can still persuade a business to pay an account that is genuinely held in the fraudster’s own name, or compromise a real supplier’s communications.
Keep normal purchase controls: approved supplier records, invoice matching, purchase orders where used and a clear process for bank-detail changes. CoP strengthens those controls but does not replace them.
Bulk payments and some account types can behave differently
Not every transaction is handled in the same way. The PSR’s requirements include exemptions, and some bulk-payment processes are treated differently from a customer setting up an individual payee. Businesses using payroll or high-volume payment files should ask their bank how CoP is applied in that channel rather than assuming the retail-app experience is identical.
If payment timing is important, read our guide to business bank transfer times. CoP happens before payment submission; it does not determine how quickly the payment scheme itself settles.
Create an internal rule for beneficiary changes
A strong business process is simple: no bank-detail change is accepted from email alone; the change is checked through an existing trusted contact; the CoP result is reviewed; and high-value changes receive a second approval. Store the verification note with the supplier record so the next payment does not repeat the whole investigation.
For a close match, capture the corrected name shown or suggested by the bank where appropriate and confirm it with the supplier. For a no match, stop until the discrepancy has a credible explanation. The cost of delaying a payment for verification is usually small compared with the cost of sending an irrevocable transfer to the wrong account.
If you sent money after a warning and now suspect fraud
Contact the bank immediately using its official fraud route and explain that the payment may have been induced by fraud. Speed matters because the receiving institution may be able to act before funds move again. Preserve the invoice, emails, phone records and the CoP warning result.
Do not continue corresponding with the suspected fraudster to “test” them while delaying the bank report. The immediate objective is to protect remaining funds and give the bank accurate destination details, timing and evidence.
Frequently asked questions
Does a Confirmation of Payee match guarantee the supplier is genuine?
No. It confirms the name-account relationship, not that the invoice or payment request is legitimate.
What should a business do with a close match?
Check the exact legal or account name with the beneficiary through a trusted channel before sending. Do not guess from the invoice alone.
Can bulk business payments be exempt from CoP?
Some bulk-payment arrangements and other transaction types can be exempt under the PSR direction. Ask your provider how CoP applies to your payment channel.
Sources and verification
- Payment Systems Regulator — Confirmation of Payee
- Payment Systems Regulator — Requirements under Specific Direction 17
Oliver Grant — Markets & Regulation Writer
I regard Confirmation of Payee as a very useful friction point in a business payment process, but not as a fraud guarantee. The strongest use is around beneficiary creation and bank-detail changes, because those are exactly the moments when invoice-redirection scams exploit staff pressure. I would make a no-match result an automatic stop and a close match a prompt for independent verification. The verification channel matters: calling the phone number in the same suspicious email does not give independent confirmation. Use a known supplier contact, previous contract, established portal or another trusted source. Even a perfect name match should not bypass normal controls such as invoice approval and second-person authorisation for large payments. Businesses should also record why a warning was overridden so there is an audit trail if the payment is later questioned. For payroll or bulk files, I would ask the bank how CoP is implemented in that specific channel because the rules and user experience can differ from a one-off app payment. The practical principle is straightforward: CoP is one layer of evidence. Combine it with supplier verification and internal approval, and it becomes far more effective than treating the on-screen result as the whole decision.
MyBankAnswers uses official provider and UK regulatory sources wherever practical. Information is general and does not constitute financial advice.