Pre-payment verification for AI accounts-payable agents

Catch vendor-payment fraud before your agent pays.

Business Email Compromise impersonates a real vendor and changes where the money goes. Bonded sits inside the AP agent’s decision: it re-checks every fact a payment relies on, right before money moves, and sends only the genuinely ambiguous case to a verified human.

Open the Invoice Inbox Vendor portal

Screened by Intercepta
Verified by World
Settled on Sui

The problem

The first payment after a vendor changes banks is where fraud gets paid.

AI agents are moving into payables. The payment moment is where this fraud lands, and an agent makes it worse unless something checks its facts.

Lost to BEC in 2025

$3.04B

Business Email Compromise losses reported to the FBI, up from $2.77B in 2024.

Rank by dollar loss

The second-largest cybercrime by total dollar loss.

Average per incident

~$123K

Enough to erase a quarter’s margin at a mid-size company.

Moved by wire or ACH

86%

Usually unrecoverable once it lands in a mule account.

Source: FBI Internet Crime Complaint Center, 2025 IC3 Report (PDF) (opens in a new tab)

How Bonded works

Four steps, on every payment

Bonded sits between the agent’s decision to pay and the payment itself. Nothing is taken on the invoice’s word.

Step 01
The agent proposes
The AP agent does not pay. It submits what the invoice claims: the vendor, the payout address, the amount and the payee’s identity.
Step 02
Bonded re-derives the facts
It reads the vendor’s real payout address and status from the vendor master, screens the claimed payee identity with Intercepta, and reads the agent’s approved policy from Sui.
InterceptaSui
Step 03
A verdict, with the evidence
Every claim is shown next to the value re-derived just now. The result is CLEARED, REFUSED or HELD, with the reason code that decided it.
Step 04
Pay on Sui, or hold for a person
A cleared invoice settles on Sui automatically, once. A held one waits for a fresh World ID check by a live person. There is no approve button on routine payments.
SuiWorld

Live proof · Sui testnet

What has actually been paid

Read from the settlement ledger on every request. Each payment links to its transaction on Suiscan.

Invoices paid on Sui

Total settled on Sui

0.00 USDSUI

Settlements

0 paid

No settlements are recorded yet. Open a clean invoice in the Invoice Inbox to have the agent pay it.

Latest activity

Full audit trail

Nothing recorded yet.

Verdicts

What happens to each kind of invoice

Three outcomes, each with the reason code enforce() returns. Only the genuinely ambiguous case ever reaches a person.

CLEARED

Cleared

Paid automatically

Every premise matches its re-derived value and the amount is inside the policy. The agent settles on Sui with no human click, once per proposal.

OK: All facts match; within budget and threshold.

REFUSED

Refused

Nothing is paid

A fact is wrong in a way no human should wave through, or it cannot be checked at all. Fail-closed: no screen result means no payment.

PREMISE_MISMATCH: A sanctioned payee trait, a suspended vendor, a wrong identity.
PREMISE_UNRESOLVABLE: A source could not be read, so the fact is unverified.
BUDGET_EXCEEDED: The period’s spend limit would be crossed.
STALE_POLICY: The policy does not match the one committed on Sui.
POLICY_FORBIDDEN_ACTION: The action is forbidden by the policy.

HELD_FOR_STEPUP

Held

Waits for a verified person

Genuinely ambiguous cases: it might be a real bank change, or it is too large to reverse. A live person approves with a fresh World ID check.

PREMISE_HELD_FOR_REVIEW: The payout address differs from the one on file.
IRREVERSIBLE_UNCONFIRMED: The amount is over the irreversible threshold.

Built with

Three partners, three jobs

Each one does something the others cannot. Remove any of them and a specific guarantee disappears.

InterceptaLive payee screening: Screens the payee identity an invoice claims against live threat intelligence (sanctions, known scammers, mixer use) before any payment. A payee with a documented risk trait is refused outright, never held for a human who might approve it.
WorldVerified humans: World ID for Agents proves a live person approves a held payment right now, with a fresh check scoped to that one proposal. IDKit proves the vendor’s own representative filed a bank change, with a passport credential.
SuiSettlement and replay safety: Holds the funds in a vault, keeps the agent’s committed policy in a registry, and settles cleared invoices. A verdict is a one-use object consumed when it settles, so a payment can never be replayed.

Why it’s different

A check inside the agent’s own decision

Bonded pays the clear cases automatically, brings in a person only when the bank details change, verifies that person’s identity, and settles each payment once and only once.

Compared with existing categories

How Bonded compares with existing product categories
Category	What they do well	Where Bonded differs
Vendor bank-account verification Trustpair, Eftsure	Verify and monitor supplier bank details; the closest competitors.	Built as dashboards for finance teams. Bonded is a check the agent itself calls mid-decision, as an SDK or MCP tool, and it settles the payment.
AP automation platforms Bill.com, Tipalti, AvidXchange	Run the whole payables workflow, with their own fraud checks.	Their checks live inside their platform. Bonded is an independent layer any agent or platform can call.
Treasury and payment security Bottomline, Kyriba	Pattern-based risk scoring across large transaction volumes.	They score patterns. Bonded re-derives the specific facts one payment relies on, and shows each one next to its claim.
Agent payment standards Google AP2, Visa’s agent guardrails	Prove what the agent was authorized to do (intent, limits).	They prove intent. Bonded proves the facts behind the intent are true. The two work together.

Vendor bank-account verification
Trustpair, Eftsure
Verify and monitor supplier bank details; the closest competitors.
Built as dashboards for finance teams. Bonded is a check the agent itself calls mid-decision, as an SDK or MCP tool, and it settles the payment.
AP automation platforms
Bill.com, Tipalti, AvidXchange
Run the whole payables workflow, with their own fraud checks.
Their checks live inside their platform. Bonded is an independent layer any agent or platform can call.
Treasury and payment security
Bottomline, Kyriba
Pattern-based risk scoring across large transaction volumes.
They score patterns. Bonded re-derives the specific facts one payment relies on, and shows each one next to its claim.
Agent payment standards
Google AP2, Visa’s agent guardrails
Prove what the agent was authorized to do (intent, limits).
They prove intent. Bonded proves the facts behind the intent are true. The two work together.

See it run

Open an invoice and watch the agent check its facts.

The inbox holds six real scenarios: a clean invoice, a spoofed bank change with a sanctioned payee, a suspended vendor, two genuine bank changes, and one invoice over the irreversible threshold.

Open the Invoice Inbox View the audit trail