1. The email
From a supplier you know, or so it seems
A supplier's own mailbox has been taken over, or the email comes from an address made to look like theirs, with a letter changed or "-billing" added to the name.
Invoice fraud protection for small businesses
Catch fake bank details before you pay them
Jatzo Invoice Guard checks the bank details on every invoice against the ones you have confirmed for that supplier, checks the email it came in, and tells you to stop before you pay one that asks you to pay somewhere new. It runs on your own computer, and you pay once.
For Windows 10 and 11. One payment, no subscription.
How the fraud works
The invoice looks right. Only the bank details are new.
Invoice fraud does not need to break into your computer. It needs one email that looks like it came from a supplier you already pay, and one person too busy to check.
2. The request
"Our bank details have changed"
The invoice is for the usual work at the usual price. It asks you to pay a new account, update your records, and often to pay today.
3. The payment
Your money goes to the fraudster
By the time the real supplier chases the unpaid invoice, the money has moved on, and getting it back is hard.
What it checks
Every invoice, before you pay it
Each invoice is checked as it arrives, against the bank details you have confirmed for that supplier, and the email it came in is checked too. You get one of three answers, with the reason in plain English.
Stop
Do not pay until you have called the supplier on a number you already have and confirmed the bank details. For changed bank details, another supplier's details, two sets in one invoice, a request to change bank details, an email that failed its sender's own checks, or a lookalike sender.
Check
Look at something first. For a new supplier, details nobody has confirmed yet, replies going somewhere else, pressure to pay today, an unusual amount, an invoice made differently from usual, or details that fail the UK banks' own sort code check.
Nothing unusual
The details match the ones you confirmed. Automated checks can be wrong, so keep your normal payment checks too.
Stop: do not pay this yet. Call the supplier on a phone number you already have, not one from this email or invoice, and confirm the bank details before paying.
Bank details changed. It asks to be paid to sort code 20-00-00, account ending 7701, but the details you trust for Acme Supplies Ltd are sort code 12-34-56, account ending 5432.
Email asks to change bank details. The email says: "Please note our bank details have changed."
Sender failed its own checks. Your email provider checked the email against the rules the supplier's domain publishes, and it failed them.
This invoice asks to be paid tosort code 20-00-00, account ending 7701
Trusted for Acme Supplies Ltdsort code 12-34-56, account ending 5432
Your suppliers
A register of who you pay, and where
The register is built from the invoices you already have. Bank details are trusted only once someone confirms them with the supplier and records how, when and by whom.
Built from your invoices
Build from invoices reads the bank details on the invoices you have collected and puts them under each supplier as seen, not trusted, ready for you to confirm with a phone call.
Every change on the record
An audit log keeps every change to the register and every decision about an alert. Each entry is sealed to the one before it, so a change made behind the tool's back shows.
Check before you pay
Drop any invoice on the Alerts screen and get its answer there and then. When a run finds an invoice to stop, Windows shows a notification, so you see it while you work in something else.
With Pro
For teams that pay many suppliers
Check a whole payment run before it goes to the bank, and make sure no single person can change where your money goes.
- Payment run check. Choose the CSV file for your bank's bulk payment upload, or one from your bookkeeping software, and every payee is checked against the register. A run with a payment to stop says so before you send it.
- A second person's approval. Newly trusted bank details wait until an approver other than the person who confirmed them approves them with their own password. It works for two people sharing one computer as well as a team.
- A shared register. Keep the register in your own MySQL or PostgreSQL database, and use it from colleagues' computers with a copy of the register's key.
Less typing
It reads your invoices and statements for you, too
The same reading that finds the bank details takes the invoice number, date and total from every invoice, and every transaction from your bank statements, with the statement's balances checked before a single row is exported.
These banks have templates of their own. Statements from other banks are read too, and always sent for you to check.
BarclaysHSBCLloydsNatWestSantanderNationwideMonzoStarling
- Collected from your inbox, by sender, subject and date, or imported from the files you download.
- Anything it is unsure of waits for you, beside the page it came from, rather than being exported as if it were right.
- Exports to CSV, to Google Sheets, and files for Xero, QuickBooks and FreeAgent.
Privacy
Your suppliers' bank details stay on your computer
There is no account to make and no server of ours your invoices pass through. The tool sends nothing to Jatzo, not even how you use it.
- The register is encrypted. Bank details are stored locked with a key kept in Windows' own password store, and shown in full only when you ask.
- Emails are checked where they are. The checks on the email an invoice came in are made on your computer, and only what they found is kept, never the message.
- Mail is only read. The connection is encrypted, and nothing is deleted or moved.
- Attachments are treated with care. Each PDF is read in a separate, limited process, and nothing in one is ever run.
- AI extraction is off unless you turn it on, and uses your own Anthropic API key.
- The licence is checked on your computer. Activating it contacts nobody.
Pricing
Pay once. Keep it.
One payment, no subscription and nothing to renew. The version you buy is yours, and it keeps working for as long as you want it.
Personal
£59 one payment
For sole traders and small businesses that pay their own suppliers.
- Every invoice checked against the bank details you trust, with the email it came in
- As many suppliers as you have, in an encrypted register with an audit log
- Check any invoice before you pay it, and a Windows notification when a run finds one to stop
- One inbox, unlimited pages, and templates of your own
- Bank statements with every balance checked, one statement at a time
- Exports to CSV, to a new Google spreadsheet, and files for Xero, QuickBooks and FreeAgent
Pro
£149 one payment
For businesses with a team paying suppliers, and for bookkeepers.
- Everything in Personal
- Payment runs checked against the register before they go to the bank
- A second person's approval before new bank details are trusted
- A shared register in MySQL or PostgreSQL
- As many inboxes as you like, whole folders of PDFs, and watched folders
- Statements joined across months and accounts, and transactions categorised by rules you edit
Try it first. The free trial reads 20 pages of your own PDFs and keeps up to 10 suppliers, with no card and no account, so you can see it check your own invoices before you buy.
Download the free trialJatzo Invoice Guard reduces the risk of paying a fraudster. It cannot guarantee that any payment is safe, and it does not replace your own checks: always confirm new or changed bank details with the supplier on a phone number you already have.
Questions
Before you buy
Does it stop all invoice fraud?
No tool can. It checks the things invoice fraud nearly always changes, the bank details and the email they arrive in, and tells you to stop and call the supplier when they do not match what you confirmed. Keep your own payment checks as well.
How does it know which bank details are right?
From you. It builds a register of your suppliers from the invoices you already have, and each set of bank details is trusted only once someone confirms it with the supplier, on a phone number you already hold, and records how, when and by whom. Until then, an invoice using those details says check.
Is my bank already doing this?
Your bank can check that the name on an account matches the name you type when you set up a new payee. Invoice Guard checks something different, before you get that far: whether the account is the one you confirmed for this supplier, and whether the email asking you to pay looks genuine. The two work well together.
Do my suppliers' bank details leave my computer?
No. The register is kept on your computer, encrypted, or in your own database server if you choose one with Pro. Nothing is sent to Jatzo.
What if my computer breaks?
The register's key lives in this computer's password store, so save a copy of it, under a passphrase, from the Suppliers screen, and keep the file somewhere safe. The same copy puts the register on a new computer.
What do I need?
A Windows 10 or 11 computer, and an email account that offers IMAP with an app password. Gmail, Yahoo Mail and iCloud Mail all do, in their security settings. Some Microsoft accounts refuse app passwords. Invoices and statements you download can be checked and read without an email account.
Will Windows warn me when I install it?
Probably, the first time. Windows says "Windows protected your PC" about programs it has not seen many times before. Choose More info, then Run anyway. It then installs for you alone, with no administrator password, and is in your Start menu.
How do I get my licence?
Your licence key is emailed to you after you pay. Paste it into Settings in the app and choose Activate.
Does it use AI?
Only if you turn it on, to read invoices its templates cannot. It uses your own Anthropic API key, so the cost is on your Anthropic account. The checks on bank details and emails never use AI.
Is there a Mac version?
Not yet. The download is for Windows.