WireVerdict: the independent verdict gate that stops BEC wire fraud before the money moves

The problem

Business email compromise cost $2.77B in reported losses in 2024 (FBI IC3), and the dominant pattern is vendor impersonation: a 'new bank details' email diverts a legitimate invoice payment because the invoice, amount and timing all look right. The AFP's 2025 survey found 79% of organizations were targeted by payments fraud and 63% faced BEC. The recommended control, callback verification of every bank-detail change, is manual and skipped at scale.

The idea

Why now

Freehand Pay (Oct 15) just put autonomous AI agents inside AP execution, so agents that move money now need an independent check; calibrated decision models (autotrust JEV-35B, Decision 3.0, Oct 14-15) finally make per-payment fraud verdicts cheap and auditable; and Ramp itself is shipping AP agents (Oct 2026), concentrating more payment authority in software and making an independent verifier mandatory infrastructure.

What it combines

freehand-pay-ai-ap-teams-that-execute-payment-not-just-approval (autonomous payment execution, the thing that needs a check) + autotrust-jev-35b (calibrated approve/review/reject probabilities per payment) + optro-autonomous-grc-agents (the GRC evidence pack that makes each verdict auditor-ready). The mix matters because fraud detection without execution context is noise, and execution without an independent, replayable verdict is exactly what auditors reject.

MVP

Weekend MVP: a QuickBooks/Xero webhook listener that intercepts new vendor bank-detail changes, runs an automated callback plus micro-deposit check on one rail, and returns a Jev verdict (approve/review/reject with probability) plus a one-page evidence log. Deliberately skip: multi-rail execution, the full GRC evidence pack, and real-time payment interception.

How it makes money

The moat

The largest AP incumbents (Ramp at ~$13B, BILL) monetize platform lock-in and card interchange; a vendor-neutral verification layer that sits in front of any AP tool and any bank is a business-model conflict, since they would have to verify payments leaving their own rails. Pure email-security players (Abnormal, Proofpoint) inspect messages but cannot do out-of-band bank verification, an architecture they would have to build from scratch.

Distribution

B2B2C through accounting-platform app stores (QuickBooks, Xero, Zoho Books), where the AP clerks already work, plus partnerships with AP automation vendors that would rather integrate an independent verifier than build bank-verification infrastructure.

Why it wins

Ramp, BILL, Airbase and Tipalti fraud flags live inside their walled gardens and serve their own rails; Trustpair and nsKnox do vendor validation as enterprise sales-led engagements. WireVerdict is vendor-neutral (any AP tool, any bank), self-serve, priced per verified change rather than per seat, and every verdict ships with a replayable evidence pack for auditors.

Risks

Biggest risk is false positives freezing legitimate payments: AP teams will rip out anything that slows month-end close. De-risk by starting in monitor-only mode (verdicts logged, nothing blocked) and graduating to blocking only after precision is measured on the customer's real payment flow.

Build it with

• Freehand Pay — AI AP teams that execute payment, not just approvalthe autonomous payment execution that needs an independent check
• autotrust JEV-35B: 35B-A3B open decision model with calibrated probabilitiescalibrated approve/review/reject verdict per payment
• Optro autonomous GRC agentsGRC evidence pack making each verdict auditor-ready

Repo to start from

wireverdict-core: the verdict schema, the evidence-pack format, and bank-verification adapters; the hosted callback infrastructure stays closed.

Evidence

• FBI IC3 2024: record $16.6B cybercrime losses, BEC at $2.7B (Infosecurity Magazine)
• Phony bank account change requests and the 2025 AFP fraud survey
• Business Email Compromise: Recognize a Scam (U.S. Bank)
• Best Accounts Payable Automation Software for 2026 (Ramp)
• BEC payment verification: checklists, callbacks, controls (Adaptive Security)