EMAIL SECURITY FOR DENTAL, GP, VETERINARY AND CARE PRACTICESPractice money,
paid to the real supplier.
A practice pays suppliers, locums and staff with a small team and often no IT department of its own, which is exactly the gap a payment diversion email is written for.
Hello Alex,
Ahead of your month-end payment runnote 1, please note that we have changed banks and our new bank details are belownote 2. Please update your records so that this month's payment for gloves and dressings reaches us on time.
Note 1: Timed for the busiest payment day
Note 2: New bank details by email
Account name: Northfield Medical Supplies Ltd Sort code: 11-22-33 Account number: 12345678
Our previous account is being closed at the end of the monthnote 3, so please do not use it for any further payments.
Note 3: Pushes you off the old account before you check
Kind regards, Sarah Lin Accounts, Northfield Medical Supplies
High riskJatzo's result for this fictional email
What moved the score
- Payment change with a warning sign+28
- Supplier payment details changed+16
- Business email compromise pattern+14
Invoice and mandate fraud, as UK Finance recorded it.
- £41.3 millionlost to invoice and mandate fraud in 2025
- 2,305cases recorded in the year
- 68%of the losses came from business accounts
Criminals intercept emails or take over an email account, then pose as a supplier, a solicitor or a builder with new bank details. UK Finance, Annual Fraud Report 2026, June 2026 (opens in a new tab)
What healthcare practices worry about.
And what Jatzo does about each, in the inbox your team already uses.
Supplier payments diverted
The NHS Counter Fraud Authority says fraudsters find a practice's regular supplier payments and claim new bank details, often at the busiest times.
What Jatzo does
The Invoice Fraud Checker compares the bank details on every invoice with the ones you confirmed for that supplier, and says Stop before you pay one that asks to pay somewhere new.
Separate licence, from £129 a yearPatients' records
Health records are among the most sensitive personal data there is. A phishing email that takes one password can open them, and a serious breach must be reported to the ICO within 72 hours.
What Jatzo does
The check flags fake sign-in requests and emails borrowing a name they do not come from, such as the NHS or a supplier, before anybody types a password.
Every planStaff pay redirected
Fraudsters email finance and payroll staff as a colleague or a senior member of staff, asking for pay to go to a new account.
What Jatzo does
A High risk result emails your practice manager the moment somebody checks it, and training shows reception and admin staff what these emails look like.
Business Pro
How it unfolds for healthcare practices.
Regular payments found
Fraudsters find out which suppliers the practice pays regularly.
A busy time chosen
They often time the request for a busy period in the practice.
- Check it here
New details arrive
An email in the supplier's name says its bank details have changed.
The money goes
Unless somebody rings the supplier on the number already on record, the next payment goes to the fraudster.
The gold mark is where Jatzo's check fits: somebody has the email open and nothing has been paid yet.
The check before you pay.
Six steps, every time. Print it, put it by whoever pays the invoices, and agree that nobody skips it because somebody senior is in a hurry.
Download the one-page checklist (PDF)Never change a supplier's, locum's or employee's bank details because of an email alone.
Ring them on the number already on your records, not one in the email, and check that number was not itself changed recently.
Check every invoice against something the practice actually ordered and received.
The practice manager or a partner, not the person who took the request, approves the change.
Run Confirmation of Payee, and for a new account send a small amount and have the payee confirm by phone.
If money has gone, ring your bank's fraud line at once, then report to Report Fraud on 0300 123 2040 or reportfraud.police.uk (Police Scotland on 101 in Scotland).
Also on day one for NHS-funded work: report to your Local Counter Fraud Specialist or the NHS Counter Fraud Authority.
What the practice gets.
It does not replace the call. It makes sure somebody makes it. Jatzo adds a check beside the message in Outlook and Gmail, at the moment somebody decides whether to pay, reply or click, and your existing email protection stays as it is.
Check before the supplier is paid
Every planAnybody unsure about a supplier's new bank details, or an invoice nobody remembers ordering, presses Check in Outlook or Gmail for a score out of 100 with the reasons.
Each invoice against confirmed details
Separate licence, from £129 a yearInvoice Fraud Checker, a separate Windows program, compares the bank details on each supplier invoice with the ones you confirmed, and says Stop when they differ. About the Invoice Fraud Checker
Your practice manager hears at once
Business and Business ProWhen anybody checks a message scoring High risk or above, an email goes to addresses you choose at your own domain, such as your practice manager's.
Training for reception and admin
Business ProBusiness Pro includes every Training Centre course for everyone in the team, Invoice and payment fraud among them, with a record of who completed it.
A dated record for a review
Business ProBusiness Pro builds a dated proof pack of the checks made, training completed and domains watched, for an insurer or a commissioner's review.
Which plan fits: an example
For healthcare practices with 15 people, we suggest Business Pro: £180 a month, or £1,800 a year paid annually.
That is £12 a person a month.
Training for reception and admin staff, and a dated proof pack for an insurer or a commissioner, are both on Business Pro.
Business Pro includes the threat report, so you know what is being aimed at the practice and whether it is getting worse: every email your team checked that came back Suspicious or above, by kind of attack, the last 30 days against the 30 before, naming nobody. At the start of each month a report goes by email to the addresses you choose, saying what was checked and what is still waiting.
- The Check button in Outlook, including on a phone, and in Gmail, for everybody in the team.
- Staff do nothing. Whoever looks after your email adds it once, for everybody.
- Nothing to replace. Your email, and the protection it already has, stay as they are.
- Jatzo keeps the score and the findings for up to 90 days, never the email or its attachments.
- Pay monthly, or a year in advance for ten months' price.
The Invoice Fraud Checker is a separate licence, from £129 a year. About the Invoice Fraud Checker
What your sector's own bodies say.
Each point is linked to where it was published, with its date.
Verify a change of supplier details using contact details already on file, and check those were not themselves changed recently; use Confirmation of Payee and question any mismatch; separate duties; freeze the payment and report as soon as something looks wrong.
Report Fraud replaced Action Fraud in December 2025. The number, 0300 123 2040, did not change. GOV.UK, Report Fraud: new service from City of London Police, December 2025 (opens in a new tab)
Questions healthcare practices ask.
Does Jatzo see patient records?
No. Jatzo reads only the email somebody chooses to check, never your clinical system or the rest of the mailbox. It keeps the subject line, the score and the findings for up to 90 days, never the message or its attachments. Links in it are checked against Google Web Risk.
Does it replace Confirmation of Payee?
No. Run Confirmation of Payee and ring the supplier on the number already on your records, as the NHS Counter Fraud Authority advises. Jatzo helps whoever reads the email notice that it needs those checks, before the payment goes.
We have no IT department. Can we set it up?
Yes. Anybody can add Jatzo to their own Outlook from the account page. For the whole practice, whoever looks after your email proves your domain with one DNS record, then uploads one file in the Microsoft 365 admin centre or installs Jatzo for your Google Workspace domain.
Check the next email that makes you pause.
For other businesses: Law firms; accountants; estate and letting agents; construction firms and architects; manufacturers, wholesalers and distributors; recruitment agencies; marketing and digital agencies; insurance brokers and charities.