Supplier Onboarding Form Generator

Supplier Onboarding Controls: Why Getting This Right Protects Your Business

Adding a new supplier to your accounts payable system without a formal onboarding process is one of the highest-risk actions in AP. It is the point at which fraudsters most commonly exploit Australian businesses — through invoice fraud, business email compromise (BEC), and ghost vendor schemes. A structured onboarding form that collects and verifies key information before a vendor is created in your system is your first line of defence. The Australian Cyber Security Centre (ACSC) consistently lists BEC fraud targeting payment detail changes as one of the most costly cyber threats facing Australian businesses.

The most critical fields to collect and verify are the ABN and bank account details. Every supplier should provide their ABN, which you must verify on the Australian Business Register (abr.business.gov.au) before creating the vendor record. If an entity cannot provide a valid ABN, you are generally required to withhold 47% of any payment under the ATO's no-ABN withholding rules — making verification non-negotiable. Bank details should be collected directly on a signed form (never via email alone) and verified by calling the supplier on a phone number sourced independently — not the number provided on the form or invoice. This single control defeats the vast majority of payment redirection fraud.

For businesses in construction, manufacturing, and field services, insurance compliance is equally important. Suppliers working on-site should provide current certificates of currency for public liability, workers compensation, and where relevant, professional indemnity. Collecting policy numbers, insurer details, and expiry dates at onboarding — and diarising renewal follow-ups — prevents the situation where an uninsured contractor causes an incident on your site and you bear the liability exposure.

How to use this supplier onboarding form generator

1. Add your company name, logo, and contact details to brand the form for your business.
2. Select the sections relevant to your business: business details, bank details, insurance, payment terms, and any additional fields your AP team requires.
3. Download the form as a PDF and send it to the new supplier to complete and return — signed and with supporting documents attached.
4. Verify the ABN on the Australian Business Register and confirm bank details by phone before entering the vendor in your accounting system or ERP.

What information must I collect from a new supplier?

At minimum: legal entity name, trading name (if different), ABN, ACN (if a company), registered address, GST registration status, bank account BSB and account number, and authorised contact details. For suppliers providing services on-site, also collect insurance certificates. For construction subcontractors, you may also need their contractor licence number and a signed subcontractor statement confirming they have met their superannuation and workers compensation obligations (required under security of payment legislation in most states).

Why is supplier onboarding a fraud risk point?

Fraudsters target the vendor creation process because it is often less scrutinised than payment approval. A ghost vendor — a fictitious supplier created in the system — can generate fraudulent invoices that pass through normal AP processes undetected. The most common variants are: a fraudster with system access creating a vendor using their own bank details; a real supplier's bank details being changed following a spoofed email; or an employee creating a vendor using a related party's account. Segregation of duties (the person who creates vendors should not also approve invoices) and mandatory independent bank account verification are the two controls that eliminate most of these risks.

Do I need to verify a supplier's ABN before paying them?

Yes. If a supplier does not quote a valid ABN, you must withhold 47% of the gross payment and remit it to the ATO (unless an exemption applies). Beyond the withholding obligation, ABN verification confirms the entity you are dealing with is registered, active, and matches the business name on the invoice. Discrepancies — for example, an invoice in one entity name but an ABN registered to a different name — are a strong indicator of fraud or an error that should be resolved before payment.