Business email compromise cost US victims $3.05 billion in 2025 (FBI Internet Crime Report), and the classic move is a "vendor" email saying the bank details changed. Big companies buy tools for this; a contractor, a clinic or a shop has an inbox and nothing else. Vendor Desk reads vendor emails through Inbin, builds the invoice table, and holds any payment whose bank details changed, whose sender is unknown or unverified, or whose amount is unusual. Releasing it needs a callback to the number on file, a ticked checklist and a name. The hold rule is deterministic code, not the model, and an email can never change the vendor master. The backend runs on a Vultr VM. Measured on 40 third-party invoices: IBAN correct 23/23, zero invented by the model.
Category tags: