THREAT GUIDE

Duplicate Payment Fraud

The same invoice, paid twice. Whether it happens by mistake or by design, duplicate payments drain money from your business. Most are never detected, let alone recovered.

0.1-0.5% of payments are duplicates
$10K-$50K leaked per $10M in payments
Most go undetected

What is duplicate payment fraud?

Duplicate payment fraud occurs when the same invoice is paid more than once. It is one of the most common accounts payable errors and one of the easiest fraud vectors to exploit. The result is the same either way: money leaves your business that should not have.

Accidental duplicates happen more often than most finance teams realise. An invoice is entered into the system twice because it arrived by email and by post, or because a staff member processed it without checking whether it had already been paid. These errors are especially common during high-volume periods like end of month or end of quarter.

Deliberate duplicates are harder to spot. An insider or external actor submits the same invoice with a slightly modified invoice number, routes it through a different approver, or resubmits it months later hoping no one checks. Combined with fake invoice tactics, duplicate payments become a reliable way to extract money without raising alarms.

How duplicate payments happen

Duplicate payments exploit gaps in your accounts payable process. Here are the most common scenarios.

1

Same invoice, different channel

A supplier sends an invoice by email. A copy arrives by post a few days later. Both are entered into the system by different staff members, and both get paid.

2

Slightly modified invoice number

The invoice number is changed from INV-2024-0891 to INV-2024-891 or INV2024-0891. The system treats it as a new invoice because the number does not match exactly.

3

Different approver path

The same invoice is submitted to two different approvers. Each assumes the other has not seen it. Both approve, and the payment runs twice.

4

Delayed resubmission

A copy of a legitimate invoice is submitted weeks or months later, banking on the fact that no one will remember or check whether it was already paid.

Warning signs of duplicate payments

Duplicate payments leave patterns. These are the signals your finance team should be watching for.

Sequential but slightly different invoice numbers

Invoices from the same vendor with numbers like INV-0891 and INV-891 or INV-0891 and INV-0891a. Small variations that bypass exact-match duplicate checks.

Same amount, same vendor, short timeframe

Two payments of the same amount to the same supplier within days or weeks. Legitimate if it is a recurring charge, but worth investigating if the amounts are irregular.

Invoices without purchase order references

Invoices that arrive without a PO number are harder to match against existing records and more likely to slip through as duplicates.

Round-number invoices

Invoices for exactly $5,000, $10,000, or other round amounts are easier to duplicate because they do not stand out as unusual. Legitimate invoices typically have specific amounts.

Multiple payment methods for one vendor

If a supplier is paid by EFT one week and by cheque the next for the same invoice, the duplicate may not appear in a single payment register.

Invoices processed by different staff

When the same invoice is entered by two different accounts payable staff members, neither may know the other has already processed it.

How ezyshield prevents duplicate payments

ezyshield fingerprints every verified payment detail. Duplicates become visible before money moves, not months after.

Payment fingerprinting

Every verified payment is fingerprinted: payee, bank account, and amount. If the same combination appears again, it is flagged before the payment is processed.

Pre-pay run re-verification

Before every pay run, ezyshield re-checks all payment details. Duplicate payee and amount combinations are surfaced automatically, whether they were submitted days or months apart.

Tamper-proof audit trail

Every payment verification is logged with timestamps and full detail. Duplicates that were missed in real time become visible in the audit trail for review.

Frequently asked questions

What is duplicate payment fraud?
Duplicate payment fraud occurs when the same invoice is paid more than once. It can happen through human error, such as accidentally processing the same invoice twice, or through deliberate manipulation, such as submitting the same invoice with minor changes to a different approver. Both cost your business real money.
How common are duplicate payments in Australian businesses?
Estimates suggest that 0.1% to 0.5% of all business payments are duplicates. For a business processing $10 million per year in payments, that represents $10,000 to $50,000 in leaked funds annually. Most duplicates are never recovered because they are never detected.
What is the difference between accidental and deliberate duplicate payments?
Accidental duplicates happen when the same invoice is entered twice due to process gaps, system errors, or human oversight. Deliberate duplicates are a form of fraud where someone intentionally submits the same invoice again, often with small modifications, to extract a second payment. Both types are preventable with the right controls.
How does ezyshield help prevent duplicate payments?
ezyshield fingerprints every verified payment detail, including payee, bank account, and amount. Before every pay run, re-verification checks catch duplicate payee and amount combinations. The tamper-proof audit trail makes every payment visible and traceable, so duplicates cannot hide in the noise.

Stop paying the same invoice twice

ezyshield fingerprints every payment and re-verifies before every pay run. Duplicates get caught, not paid.