AWRA Help Center

Where a supplier is paid is the field a payment fraud changes. The covered details are the supplier’s M-Pesa phone, paybill and paybill account, M-Pesa till, bank and bank account number.

The Supplier Is Always Told

Whenever those details change, the supplier is emailed at the address on their record with what changed, account numbers masked. This email cannot be switched off — it is a security control, not a preference — and it is the reason a supplier without an email address on file is worth fixing. Every change is also written to the audit log.

Requiring A Second Person

1. Open Settings → Procurement & Vendors → Procurement Defaults.
2. Turn on A change to a supplier’s bank or M-Pesa details needs a second person and save. It is off by default.

With it on, saving new payment details on a supplier does not change them. The edit is held as a pending change, and everyone who can approve vendors is notified. Payments keep going to the old details until the change is decided.

• The supplier’s page shows the pending change as a before-and-after, with account numbers masked.
• Whoever asked for the change cannot approve it. Someone else with the approve vendors permission approves or rejects it.
• A newer edit replaces one still waiting, so an old change cannot be approved over a correction.
• Approving applies the details and emails the supplier; rejecting leaves the old details in place and is recorded in the audit log.

In The Mobile App

A pending change shows on the supplier in the app, and an approver can approve or reject it there. Payment details themselves are edited on the web.