# Verdict L402 – Payee Check (BEC / Invoice Fraud Guard)

> Verdict L402 – Payee Check (BEC / Invoice Fraud Guard) is a paid API for AI agents from verdict.kechlab.com, paid per call via x402, $0.05/call, status unknown (last checked 2026-10-21).

Detects supplier bank-detail change fraud (BEC) in payment emails by validating IBAN and sender domain against your supplier record and reading pressure signals, returning ok, verify_callback, or freeze_payment.

## Facts

- Endpoint: POST https://verdict.kechlab.com/v1/payee-check?utm_source=zero.xyz
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/verdict-l402-payee-check-bec-invoice-fraud-guard-cce640e9
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_7rCL49vKBN7eI_C_5TmNa

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability verdict-l402-payee-check-bec-invoice-fraud-guard-cce640e9 -d '<json body>'
```

Example prompt: Before you pay this invoice, run a BEC check on it — the email body says to send £42,000 to a new IBAN GB29NWBK60161331926819, the sender is accounts@acme-invoices.net, and our supplier record shows Acme Ltd uses domain acme.com and IBAN GB29NWBK60161331926820. Tell me if it's safe to pay, needs a callback to verify, or should be frozen.

## When to prefer this

Use this endpoint when an AI agent or RPA bot is about to approve, schedule, or execute a payment and needs a fast pre-payment fraud gate specifically for business email compromise and invoice-fraud vectors. Prefer it over generic email-spam classifiers when you have structured supplier records (domain, IBAN) to compare against, and over manual review when you need a sub-second automated decision. Especially valuable for agentic accounts-payable pipelines where no human reviews each payment.

## Known failure modes

- Missing email body causes insufficient signal for a reliable verdict
- No known_supplier record provided reduces IBAN and domain comparison accuracy
- Lookalike domain detection may miss highly novel homograph attacks
- Legitimate urgent emails may trigger verify_callback false positives
- Non-English email bodies may reduce pressure-signal detection quality
- Invalid or malformed IBAN in input may cause comparison to fail silently

## How this service works

Invoice-fraud guard for AI agents that pay bills. Detects supplier bank-detail change fraud (BEC) before payment: checks the IBAN and sender domain against your supplier record (lookalike domains included), then reads pressure and off-channel requests. Returns ok, verify_callback or freeze_payment.

## Output

Returns one of three verdicts: 'ok' (safe to pay), 'verify_callback' (call the supplier through a known channel before paying), or 'freeze_payment' (strong fraud signals detected — do not proceed). May include signals explaining the decision: IBAN mismatch, lookalike sender domain, urgency/pressure language, or off-channel redirection tactics.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "body": {
   "type": "string",
   "description": "the email body"
  },
  "sender": {
   "type": "string",
   "description": "(optional) sender address"
  },
  "subject": {
   "type": "string",
   "description": "(optional) email subject"
  },
  "known_supplier": {
   "type": "object",
   "description": "(optional but recommended) { name, domain, iban } from your supplier record"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/verdict-l402-payee-check-bec-invoice-fraud-guard-cce640e9/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from verdict.kechlab.com](https://www.zero.xyz/host/verdict.kechlab.com/llms.txt)