Bank Account Ownership Verification in Australia
The most-skipped step in payment processes is the most important one. Ownership verification confirms that the bank account belongs to who claims to own it, before you pay.
What is bank account ownership verification?
Bank account ownership verification answers one question: does this bank account belong to the person or business I think I am paying? It is different from checking whether an account number is valid, whether a BSB exists, or whether the bank details "look right." It confirms the actual owner of the account.
This distinction matters because payment redirection fraud relies entirely on this gap. A scammer provides bank details that are technically valid. The BSB is real. The account number exists. The only problem is that the account belongs to the scammer, not your supplier. Without ownership verification, nothing in your payment process catches this.
Think of it this way: validating a BSB is like confirming that a street address exists. Ownership verification is like confirming that the person you intend to visit actually lives there. Both pieces of information are necessary. Only one of them prevents you from delivering money to the wrong person.
Despite being the most critical check, ownership verification is the step most Australian businesses skip. According to the latest fraud statistics, payment redirection scams cost $152.6 million in 2024. In the vast majority of those cases, no one confirmed account ownership before paying.
Why BSB validation is not enough
Many businesses believe they are verifying bank details when they are only validating the BSB. Here is what each check actually tells you.
BSB validation
- Confirms the BSB is a valid number
- Identifies the bank and branch
- Does NOT confirm the account exists
- Does NOT confirm who owns the account
- Does NOT prevent payment redirection
Ownership verification
- Confirms the account holder name
- Matches account to the intended payee
- Queries the receiving bank in real time
- Catches payment redirection attempts
- Returns match, partial match, or no match
The bottom line: BSB validation tells you which bank and branch a number belongs to. Ownership verification tells you who the money will go to. Only one of these prevents fraud.
How to verify bank account ownership
There are several approaches to verifying ownership. They vary significantly in reliability and scalability.
Phone callback (manual)
Call the supplier on an independently sourced number and ask them to confirm their bank details. This is time-consuming, does not scale, and relies on reaching the right person. If the email account has been compromised, the scammer may have also changed forwarding on the phone.
Micro-deposit test (slow)
Send a small amount (e.g. $0.01) and ask the account holder to confirm the amount. This proves the account exists and the holder can see transactions, but it takes 1-3 business days and does not confirm the holder is your intended payee.
Database lookup (static)
Check account details against a third-party database of known accounts. These databases can be outdated and do not reflect real-time account changes. An account that was valid last month may have been closed or transferred.
Confirmation of Payee (live)
A real-time query to the receiving bank that checks whether the account holder name matches the payee you intend to pay. Returns a result in seconds. Reflects the current state of the account, not a static snapshot.
The role of Confirmation of Payee
Confirmation of Payee (CoP) is the gold standard for bank account ownership verification. Here is how it works, step by step.
Submit payee details
You provide the payee name, BSB, and account number. These are the same details you would use for any payment. No additional information is needed from the supplier.
Real-time bank query
The CoP service sends a request directly to the bank that holds the account. This is a live query through banking infrastructure, not a lookup against a static database.
Receive a result
The bank responds with one of three results: match (the name matches the account holder), partial match (a close but not exact match, e.g. abbreviated name), or no match (the name does not match). This happens in seconds.
Act on the result
A match means the account belongs to who you expect. A partial match may indicate a trading name or abbreviation that needs confirmation. A no match is a red flag: the account does not belong to the entity you think you are paying. Investigate before sending money.
How ezyshield verifies bank account ownership
CoP confirms the bank account. But a scammer can own an account in their own name. That is why ezyshield combines ownership verification with identity checks and business validation for complete protection.
Live CoP through banking infrastructure
Real-time account ownership checks against the receiving bank. Not a static database. A live query that confirms the account holder matches the supplier you intend to pay, reflecting the current state of the account.
Biometric identity verification
Confirms the real person behind the payment request. Ownership verification tells you the account belongs to "ABC Pty Ltd." Identity verification confirms that the person providing those details is authorised to act for ABC Pty Ltd.
ABN and ASIC business validation
Validates the supplier's business registration with the Australian Business Register and ASIC. Confirms the business is active and the entity name matches what is on record. Learn more about ABN verification.
Continuous re-verification
Verified once is not verified forever. ezyshield re-checks bank account ownership before every pay run. If the account holder has changed, or the account has been closed, payment is blocked until re-verified.
Frequently asked questions
What is bank account ownership verification?
Why is BSB validation not enough?
How does Confirmation of Payee verify account ownership?
Is bank account ownership verification available in Australia?
How does ezyshield verify bank account ownership?
Related content
Confirmation of Payee
Deep dive into how CoP works and why it matters for Australian businesses.
THREATPayment Redirection Fraud
The primary attack that exploits missing ownership verification.
LEARNSupplier Verification Australia
Complete guide to verifying suppliers before making payments.
LEARNVerify Supplier Bank Account Details
Step-by-step process for verifying bank details in Australia.
Verify account ownership before every payment
ezyshield uses live Confirmation of Payee through banking infrastructure to confirm who owns the account. Real-time, automated, and auditable.