An accounts payable process without controls is a fraud vector. An AP process without structure is a cash flow liability. The invoice that never got matched against the purchase order. The vendor payment approved by the same person who submitted it. The duplicate invoice that processed because no one checked the invoice number. These are not rare failures — the ACFE reports that 29% of organisations lack adequate AP internal controls, and AP fraud consistently accounts for a significant share of reported financial misconduct. A structured AP process addresses all of them: standardising how invoices enter the system, enforcing three-way matching before approval, routing approvals through a defined hierarchy that separates duties, scheduling payments to optimise working capital, and maintaining an audit trail for every transaction. This free accounts payable process checklist gives finance teams, controllers, and accounting managers a structured framework for a controlled, efficient, and audit-ready AP cycle.
What happens: An invoice is submitted and paid twice because the duplicate check was not run. A fraudulent vendor is created because no one validated the bank details. The same person who approves invoices also makes the payment — with no second pair of eyes.
The cost: AP fraud and duplicate payments cost organisations an estimated average of 0.5% of annual revenue. For a $10M business, that is $50,000.
Prevention: Three-way matching, segregation of duties, and duplicate invoice checking as mandatory steps before any payment is made.
What happens: Invoices sit in an inbox waiting for an approver who is travelling. A vendor’s payment terms are not captured in the system, so the early payment discount expires. A disputed invoice sits unresolved for three months because no one owns the resolution process.
The cost: Lost early payment discounts, supplier relationship damage, and potentially the loss of preferred payment terms.
Prevention: A structured approval workflow with defined turnaround times, payment term capture at invoice entry, and a clear dispute resolution process.
What happens: The year-end audit asks for supporting documentation for 50 transactions. The team spends two days finding invoices across shared drives, email inboxes, and paper files. Three cannot be found at all.
The cost: Audit delays, qualified audit findings, and regulatory exposure.
Prevention: A structured AP process that systematically archives all supporting documentation — POs, goods receipt notes, invoices, approvals, and payment confirmations — against every transaction.
This checklist covers seven phases of the AP cycle — from vendor master file management through to reconciliation and reporting. Every phase contains the key controls that protect the organisation from fraud, error, and audit exposure.
The vendor master file is the foundation of AP security. A poorly controlled vendor master is where the vast majority of AP fraud begins — with the creation of fictitious or modified vendor records.
Three-way matching is the primary control against fraudulent or erroneous AP payments. An invoice that cannot be matched to a purchase order and a goods receipt note should never proceed to approval.
Three-way matching is the comparison of three documents before any invoice is approved for payment.
What it confirms: That the goods or services were formally ordered by an authorised person within the organisation, at the agreed price and quantity.
Why it matters: Without a PO, there is no documented basis for believing the invoice relates to a legitimate business purchase.
What it confirms: That the goods or services were actually received and accepted by the organisation.
Why it matters: Payment for goods or services not yet received — or not received at all — is one of the most common forms of AP fraud.
What it confirms: That the vendor is requesting payment for the correct amount, for the correct quantity, at the agreed price.
Why it matters: Invoices with incorrect amounts, quantities, or unit prices that are not caught before approval result in overpayment.
CheckFlow’s AP checklist enforces all three documents before the approval phase can begin — the match cannot be skipped under payment deadline pressure.
The most critical AP internal control — that the person approving invoices is never the same person making payment — is often stated in policy and violated in practice when teams are under pressure. CheckFlow’s structured AP checklist assigns approval and payment tasks to different named roles, making the separation structural rather than relying on individual discipline.
Every step in CheckFlow’s AP checklist is timestamped and attributed to the person who completed it. The PO reference, matching outcome, approval name, payment method, and remittance confirmation are all logged against each invoice. When an audit asks for complete documentation for a specific transaction, it is available in minutes rather than days.
Finance managers managing 50 invoices at different stages — some awaiting matching, some in approval, some overdue for payment — need a single view of the full pipeline. CheckFlow’s grid shows every invoice’s current stage and outstanding tasks simultaneously, so the team knows exactly where to focus without opening individual email chains.
The invoice approval step within AP deserves its own structured process. CheckFlow’s Invoice Approval Workflow Checklist covers the full multi-level approval process in detail — from receipt through to authorised payment release. See the Invoice Approval Workflow Checklist →
Payment fraud often targets the vendor master rather than the invoice. The Vendor Bank Detail Change Verification Checklist puts every request to change a supplier’s bank account through an independent call-back and a second approver before AP pays to it.
AP reconciliation is a key step in the month-end close. CheckFlow’s Month-End Finance & Accounting Close Checklist coordinates AP reconciliation within the broader financial close cycle. See the Month-End Close Checklist →
Invoice Approval Workflow Checklist
Accounts Receivable & Collections Checklist
Vendor Bank Detail Change Verification Checklist
Goods Receiving & Inspection Checklist
Bank Reconciliation Checklist
Describe the process in a sentence and the AI checklist generator drafts the phases and tasks for you.
The AP process covers how a business receives, validates, approves, records, and pays supplier invoices. It spans seven areas: vendor master file management (setting up and controlling vendor records), invoice receipt and capture (logging and coding incoming invoices), invoice validation and three-way matching (comparing the invoice to the purchase order and goods receipt note), the approval workflow (routing invoices through defined approval levels), payment scheduling (batching payments to optimise working capital and capture early payment discounts), payment execution (processing and confirming payments), and reconciliation and reporting (reconciling the AP ledger to the general ledger, reviewing ageing, and producing cash flow input). Strong internal controls — particularly three-way matching and segregation of duties — are embedded throughout.
Three-way matching is the comparison of three documents before any invoice is approved for payment: the purchase order (confirming the goods or services were formally ordered by an authorised person at an agreed price), the goods receipt note or service confirmation (confirming the goods or services were actually received), and the supplier invoice (confirming the vendor is requesting payment for the correct amount and quantity). All three documents must align within accepted tolerance before the invoice proceeds to approval. Three-way matching is the primary control against paying for goods not ordered, not received, or incorrectly priced.
Segregation of duties in AP means that no single person should have control over all steps of the payment cycle. Specifically: the person who creates or maintains vendor records should not be the same person who approves invoices; and the person who approves invoices should not be the same person who makes payments. When one person controls vendor setup, invoice approval, and payment execution simultaneously, they have the ability to create a fictitious vendor, raise a fraudulent invoice, and approve and make payment — all without any oversight. Segregation of duties removes this risk by requiring multiple parties to complete the cycle.
Monthly reconciliation is the minimum for most businesses — aligning the AP ledger to the general ledger as part of the month-end close process. Major vendor statement reconciliations should also be conducted monthly or at least quarterly, particularly for high-volume supplier relationships. The AP ageing report should be reviewed monthly to identify invoices outstanding beyond payment terms. Year-end requires a more comprehensive AP reconciliation as part of the audit preparation process.
14-day free trial, no card required. The Business plan is $10 per user per month after the trial. Full details at checkflow.io/pricing.
14-day free trial, no credit cardFull refund in your first 30 daysUS hosting, EU on request
