Dual approval for vendor bank changes is not optional theatre
Payment diversion cases we see in Thailand almost always involve a bank-detail edit that one person both entered and approved.
Accounts payable automation applications usually offer a dual-approval switch for vendor bank edits. Holiday cover is where that switch gets turned off “for a week” and never restored.
When we review vendor master activity, we look for same-day create-and-pay patterns and for editors who also sit in the payment proposal approval chain. A clean configuration screen is not enough if the holiday role matrix collapses segregation of duties.
Finance sponsors sometimes ask whether callback verification to a known vendor number is still worthwhile. Yes — especially for foreign-currency payees where the automation’s fraud rules are thinner than the team assumes.