
Funeral home vendor payments should follow a consistent check whenever bank details or payment instructions change. Pause the change, confirm it through a trusted contact route, and record who verified it before authorizing payment. The process should work when the owner is in a service and the invoice arrives with an urgent deadline.
This recommended workflow is for funeral home owners, office managers, and bookkeepers working with ongoing suppliers in Illinois, Missouri, Kansas, and elsewhere. It concerns ordinary business invoices. Preneed funds, trust accounts, client money, and other restricted funds need their own applicable controls and qualified advice.
Treat funeral home vendor payments as a defined workflow
Separate three questions: was the purchase authorized, was the work or product received as agreed, and are the payment instructions verified? Put a name against each check. An invoice can match a real order while still containing a payment change that nobody has confirmed.
Use a fictional example to test the process: a familiar printer sends an invoice shortly before a service and asks for payment to a new account. Staff should know who may pause the payment, who can contact the supplier, and who makes the final decision. An urgent service deadline should not silently remove those roles.
Confirm changes through an independent contact route
The FBI's guidance on business email compromise describes fraudulent messages that appear to come from a known source. It recommends verifying changes to account numbers or payment procedures and using a phone number obtained independently, rather than one supplied in the suspicious request. A familiar-looking email is not sufficient confirmation.
Build the callback into the normal process for new or changed instructions. Use the supplier contact route established independently of the change request, confirm who is authorized to discuss payment details, and record the outcome in the business system. If that route cannot be confirmed, keep the change pending and escalate it.
Give a small team a workable second check
Where staffing permits, ask someone other than the person entering changed details to approve the change before payment. Compare the approved change with the payment record, not simply with another copy of the same email. Keep the verification record with the supplier file so the next person does not repeat an unverified assumption.

For a small firm, the second person could be the owner or an appropriately authorized bookkeeper. If no approved reviewer is available, use a documented escalation and timing decision instead of pretending the check happened. Agree on this approach with the people responsible for the firm's finances before an urgent invoice arrives.
Keep supplier records useful and restricted
Record the supplier's business identity, the agreed contact route, who may approve changes, and the date of the most recent verification. Distinguish a proposed change from the approved payment record. Make sure staff know which record is authoritative so a saved attachment or an old email does not become an alternative set of instructions.
Limit access according to the person's role and avoid copying account details into general staff chat. Use fictional information for training. When someone leaves or responsibilities change, review who can amend supplier records and authorize payments through the firm's existing account-management process.
Respond promptly when a payment may be wrong
If fraud is suspected after a transfer, the FBI advises contacting the financial institution immediately, asking it to contact the receiving institution, and reporting business email compromise to the Internet Crime Complaint Center. Keep the response separate from a routine invoice dispute; do not wait for the next bookkeeping session to raise the concern.
Internally, identify the person coordinating the response, preserve the relevant messages and payment records, and involve the firm's security or financial advisers as appropriate. Do not promise that money will be recovered. Follow the bank's instructions through a verified contact route and document what was reported and when.
Review the control that failed after the immediate response. Was the callback skipped, did the record fail to distinguish pending and approved details, or was one person expected to handle incompatible tasks during a service? Correct that specific weakness and rehearse the revised process with a fictional invoice.
Step by step
Put it to work this week
Recommended controls to agree with the people responsible for your firm's finances.
Map one supplier payment
Identify who confirms the order, receipt, account-change verification, and final approval.
- Who does it
- Office manager
- When
- This week
Rehearse an urgent change
Use a fictional invoice to check that staff pause changed instructions and know the callback and escalation route.
- Who does it
- Bookkeeper and owner
- When
- This week
Prepare the response contacts
Keep verified bank and internal incident contacts accessible to authorized staff, with a clear person responsible for escalation.
- Who does it
- Owner
- When
- This week
Questions professionals ask
- What should a funeral home do when a vendor changes bank details?
Hold the change until an authorized person verifies it through an independently established contact route. Record the result and complete the firm's approval process before using the new details. Do not treat a familiar sender name or an urgent invoice as proof that the change is genuine.
- Does a small funeral home need two people for every supplier payment?
A second check for changed payment instructions is a recommended operating control where staffing permits, rather than a universal legal requirement. Agree on a proportionate process with the firm's financial adviser, including what happens when the normal reviewer is unavailable. Restricted funds require separate applicable controls.
- What if a payment has already been sent to a suspected scammer?
Contact the financial institution immediately and follow its instructions; the FBI also recommends reporting business email compromise to its Internet Crime Complaint Center. Preserve the relevant messages and payment records for the response team. Prompt action is important, but recovery cannot be promised.
Sources and references
These references support the guidance in this article. Each entry names the source and the date we checked it. Open the links for more detail, and confirm current requirements, availability, or costs with the relevant organization before relying on them.
- FBI — Business Email Compromise · checked
You should verify any change in account number or payment procedures with the person making the request.