How to hand over AP
without giving away bank access
The nervousness about delegating accounts payable is entirely about the bank, and it is well founded. Here is the split that removes the risk without keeping the work.
Accounts payable is one of the easiest functions to delegate and one of the last that businesses actually delegate, because the mental model is "AP means paying people" and nobody wants an offshore team member paying people.
But paying is one step at the end of a long process. Everything before it — receiving bills, entering them, matching to purchase orders, reconciling supplier statements, catching duplicates, querying discrepancies, preparing the payment run — is where all the hours are and none of the authority is.
Separate the preparation from the release and AP becomes one of the safest handovers available. The person never touches the bank; they hand you a payment file to approve.
Who this is for
✓Worth your time if
- Bill entry and supplier statements are chronically behind
- You have paid a duplicate invoice, or suspect you have
- Supplier calls chasing payment reach you rather than a process
- You approve payments in a rush because the run was prepared late
✕Probably not if
- You have no approval process at all — build that first
- You want someone to authorise payments
- Your bills arrive as paper in a drawer with no capture system
- You are unwilling to keep a review step permanently
What preparation actually covers
Everything below happens before any money moves. None of it requires bank access.
Invoices captured and entered against the right supplier, account code, job and tax treatment, from your document capture inbox.
Invoices matched to POs and delivery documentation, with quantity and price differences queried before entry rather than after payment.
Checking supplier, amount, invoice number and date against what is already in the ledger — the control most small businesses do not have.
Monthly statements reconciled against the ledger so missing bills and misapplied credits surface before a supplier calls.
Anything that does not match raised with the supplier and tracked to resolution, rather than paid to make it go away.
The run built to your terms and priorities, with the payment file or ABA prepared and a summary for your approval.
Bank details, terms and contacts kept current — with a hard rule that changes to bank details are verified by you, never by email.
What is due, what is overdue and what is in query, weekly, so payment decisions are made on facts.
The controls that make this safe
Four controls. With them in place, AP preparation is one of the lowest-risk functions you can delegate. Without them, no arrangement is safe regardless of who does the work.
- No bank access, everNo online banking login, no payment token, no authorisation. They prepare the file; you release it. This is absolute.
- You approve every payment runA summary of what is being paid, to whom, for what, before release. Reviewing a prepared run takes minutes.
- Bank detail changes are verified by you, by phoneThe most common payment fraud in Australia is a spoofed email changing supplier bank details. Any change is verified by you, by phone, on a known number. Make this a written rule, not a habit.
- Separation of dutiesThe person entering bills should not be the person who can approve payment. Delegating AP preparation actually improves this, because previously one person often did both.
The order to hand it over
Entry first, payment run preparation last. Authorisation never.
Set the approval rule before day one
Write down who approves what, at what value, and that no payment leaves without approval. If this rule does not exist yet, that is the real finding — it should exist regardless of who does AP.
Bill entry only, for two weeks
Coding and entry against your accounts list, with anything ambiguous on a query list rather than guessed. Errors surface in the ledger immediately and cost nothing.
Add PO matching and duplicate checking
Same knowledge, and this is where the role starts paying for itself — most businesses have paid something twice.
Add supplier statement reconciliation
Monthly, and it catches the bills that never arrived as well as the ones paid twice.
Then payment run preparation
They build the run; you review the summary and release it. Keep this step permanently — it takes minutes and it is the whole control.
Letting a bank detail change through on an email
This is the specific way businesses lose real money with AP, and it has nothing to do with offshore staffing — it happens with local staff constantly. An email arrives, apparently from a known supplier, advising new bank details. It is well written, it references a real invoice, and the details are changed without anyone picking up the phone. The next payment run sends money to a criminal. The rule that prevents it is one line: bank detail changes are verified by the business owner, by phone, on a number from your own records, never on a number in the email. Write it into the role's process document on day one. Then tell your team member explicitly that they will never be criticised for delaying a payment to verify — because the pressure in the moment is always to be helpful.