A $50 million transportation and logistics company running Microsoft Dynamics ERP thought it had comprehensive fraud protection. They had invested in payment processing tools, established verification protocols, and felt secure in their financial operations. But they were about to discover a critical blind spot that would cost them dearly, and it's a vulnerability that affects virtually every Microsoft Dynamics ERP user.
Watch the full story unfold in our 10-minute "One Fail, One Fix" video interview, where from dives deep into this real-world case study and reveals the solution that not only eliminated their fraud risk but nearly doubled their payment rebates.
The Fail: A Holiday Weekend Nightmare
Picture this: It's right before a holiday weekend, and your finance team receives an urgent email from what appears to be a trusted vendor. The message is alarming, they're threatening to halt work on a critical project because they haven't received payment, and they need their "updated ACH information" processed before end of day.
This $50 million company was running Microsoft Dynamics ERP and had invested in what they believed was comprehensive payment processing protection. They even had protocols in place—a three- or four-step verification process for updating vendor ACH information, including keeping vendor phone numbers on file for verification calls.
But here's where things went wrong: the pressure of an urgent deadline, combined with the inconvenience of a holiday weekend, led them to cut corners. They completed only two of their four verification steps, skipped the crucial phone call to verify the ACH change, and rushed the payment through their provider.
The payment went out immediately. And with ACH transfers, there's no going back: no stop payments, no cancellations, no recourse whatsoever. The fraudster could withdraw that money instantly.
A week later, when the real vendor called asking why their project had been halted for non-payment, the terrible truth emerged: they had been victims of ACH fraud.
That money was gone. No recourse.
The Shocking Reality of ACH Fraud
The statistics are staggering. While businesses worry about check fraud and virtual card fraud (which totaled $173 million in 2023), ACH fraud reached an astronomical $2.9 billion in the same year. That's not million but billion, with a B. ()
This isn't an isolated incident. Business email compromise attacks are becoming increasingly sophisticated. Fraudsters infiltrate email systems and lie in wait, then send convincing emails that appear to come from legitimate vendors. They're getting craftier with details, changing "Corpay" to "Corpoy", for example, or making other minute alterations that are easy to miss under pressure.
The Problem with "Partial" Solutions for Microsoft Dynamics ERP
The victim company thought they were protected because they had a payment automation provider. But here's the critical distinction: there are bill pay providers who simply draw funds from your accounts and make payments on your behalf, and then there are fully-managed payment providers who take on complete responsibility and liability.
The company was still managing ACH information internally within their ERP system. Despite having protocols, the burden of vendor maintenance, verification calls, and updates fell on their already-overwhelmed finance team. When pressure mounted during that holiday weekend, human error became inevitable.
The Fix: Corpay End-to-End Payment Management with Full Liability Protection
The solution came through a Microsoft partner who introduced the company to Corpay's fully-managed payment approach. Here's how it works:
Complete Handoff: Instead of managing payment details internally, the company simply approves a weekly payment batch within their Microsoft ERP. A single file gets transmitted automatically via API integration to Corpay, who then handles everything else.
Four-Level Human Verification: While software catches potentially fraudulent payments, Corpay also employs over 1,000 payment specialists who manage vendor accounts. They never change ACH information without four different human verification levels, including calling the vendor using the phone number they maintain on file, not the number in any email.
Full Liability Transfer: Perhaps most importantly, Corpay assumes 100% of the liability for payment fraud, removing this risk entirely from the client's shoulders.
The Quantifiable Results: Security Plus Profitability
Beyond the obvious security improvements, the results were financially impressive:
- Virtual Card Optimization: moved the company from 12% virtual card usage to 28% by leveraging their network of 4 million vendors, with 600,000 already verified for virtual card payments
- Enhanced Security: Virtual cards provide the most secure payment method. Each card is issued for the exact payment amount, down to the penny, making fraud nearly impossible
- Nearly Doubled Rebates: Annual rebate earnings jumped from just over $50,000 to almost $100,000, nearly doubling their return
Key Takeaways for Finance Leaders Using Microsoft Dynamics ERP
If you're evaluating payment providers or have concerns about ACH fraud, ask these critical questions:
- "Who maintains the ACH information, my team or yours?" If it's still your responsibility, you're still at risk.
- "Where do payment funds come from, my bank account or yours?" The answer reveals whether you're using a bill pay service or a fully-managed solution.
- "What liability protection do you provide?" Make sure fraud liability transfers completely to your provider.
- "What's your vendor verification process?" Look for multiple human verification steps, not just software screening.
Don't let rebate potential overshadow security considerations. While earning returns on payments is attractive, protecting your company from the $2.9 billion ACH fraud epidemic should be your primary concern.
The Bottom Line
ACH fraud isn't a distant threat, it's a $2.9 billion reality that's growing more sophisticated every day. Having "some" fraud protection isn't enough when fraudsters are specifically targeting the gaps in partial solutions.
The fix isn't just better software or stricter internal protocols. It's recognizing that payment security requires end-to-end management by specialists who assume full liability for the process. When done right, enhanced security actually improves profitability through optimized payment methods and vendor network advantages.
In today's threat landscape, the question isn't whether you can afford comprehensive payment protection, it's whether you can afford to operate without it.
uses modern technology to help companies control business expenses and make payments more safely and securely than ever before.
to get matched with a Corpay solution.