Active company
The SIREN or SIRET is looked up in the INSEE SIRENE register: a company that has ceased trading or a closed establishment has no reason to send you bank details.
Free tool
Check a change of bank details
A supplier sends you new bank details? Before updating its record, enter its SIREN or SIRET and, if you have them, the new IBAN and the e-mail address that wrote to you. TierSafe reads the BODACC notices and the SIRENE register, and checks the IBAN and the protection of the e-mail domain, with the rules of its Sentinelle monitoring.
Why check before changing bank details
Bank details fraud does not target one payment: it targets the supplier record. Once the IBAN is changed, every following invoice, perfectly legitimate, goes to the fraudster's account, and nothing shows until the real supplier chases payment.
The riskiest moment is when the supplier changes hands: a new director published in the BODACC, sometimes on the strength of forged documents, and bank details that follow a few days later. This is the timeline the fraudster does not control, and the one this tool reads.
What the tool checks
Change of director
Changes published in the BODACC (director, head office, name) open a watch period: this is where Kbis fraud happens, with a link to the official notice.
Shell takeover
Several kinds of change in a short time, or a dormant company revived then changed: the profile of a company bought to serve as a front.
Insolvency proceedings
Ongoing proceedings in the BODACC change the rules: payment to the administrator, claims to file. New bank details at that moment deserve a double check.
IBAN of the new bank details
Length, check digits and bank country. A valid IBAN does not prove it belongs to the supplier: it only proves there is no typo.
Imitable e-mail
The domain of the address that wrote to you is read in the public DNS: does it receive e-mail, do its DMARC policy and SPF prevent imitation? When given, the supplier's usual address reveals a lookalike domain.
Frequently asked questions
What should I check when a supplier sends new bank details?
Three things, in this order: that the company has not changed hands recently (director published in the BODACC), that the message really comes from it (domain of the e-mail address), and that the change is confirmed by a call to a number you knew before this message. The tool does the first two; the third is yours.
Does a valid IBAN prove the account belongs to the supplier?
No. The IBAN check digits catch a typo, not a diversion: a fraudster's account has a perfectly valid IBAN. Only calling the supplier back, or a bank payee verification service, ties the account to its holder.
Where does the information come from?
From the INSEE SIRENE register and the BODACC notices, of which TierSafe keeps a local copy, and from the public DNS for the domain of the e-mail address. No third-party service is queried, and nothing is sent to the supplier.
What do you keep from my search?
Nothing: neither the SIREN, the IBAN nor the e-mail address. Only an anonymous count of the day's searches is kept, to apply the usage limit.
How many checks can I run?
5 checks per day, all free tools combined, without signing up. To be warned as soon as one of your suppliers changes director, follow them with Sentinelle: your company and ten third parties are monitored for free.
Further reading : Kbis fraud: spotting a hijacked identity among your suppliers · SIREN and SIRET: reading and checking a number · Check a SIRET or SIREN number
Be warned before the next bank details
Sentinelle monitors your suppliers every day: change of director, proceedings, cessation, with a bank details watch opened at the right time. For free and without a subscription, for your company and 10 third parties, with a same-day alert.