Basware Completes Trustpair Acquisition to Close a Payment Fraud Gap
Basware has completed its acquisition of Trustpair, closing a deal first announced on 26 August 2026 and extending the accounts payable software vendor's fraud controls from the invoice itself to the supplier bank account that receives the payment. The companies confirmed completion on 5 October 2026. Financial terms were not disclosed.
The logic is narrow and specific. Basware's software already establishes whether an invoice is authentic, accurate and properly approved. None of that helps if the bank account attached to the invoice belongs to a fraudster rather than the supplier. Trustpair, a Paris-based specialist founded in 2017, validates that last link: whether the account details actually belong to the intended payee before funds are released. The acquisition stitches the two checks into a single lifecycle, from invoice approval through to payment.
What has Basware actually bought?
Basware has bought an account-validation engine that functions as an enterprise equivalent of Confirmation of Payee, the consumer-facing check that UK banks run before a transfer. Trustpair integrates into corporate ERP, treasury and procure-to-pay systems to verify vendor bank details at scale, flagging suspicious changes before a payment leaves the business. Trustpair says it secures payments for more than 600 organisations, including Fortune 500 companies, from offices in New York, Paris and London, and holds SOC 2 Type II and ISO 27001 certifications.
Crucially, Trustpair will continue to operate independently as a Basware company, keeping its own platform, contracts, support and system-agnostic approach. Customers can still deploy it whether or not they use Basware. That open-ecosystem positioning is the asset Basware is paying to preserve, since a validation layer is only useful if it reaches across every finance system a company runs, rather than a single vendor's.
Why is the supplier bank account the new fraud target?
Because the invoice is no longer where the money is lost. Independent data shows fraud has shifted from forging documents to hijacking the payment instructions underneath genuine ones. The Anti-Phishing Working Group attributes roughly 59 per cent of business email compromise losses to vendor email compromise and invoice modification, where attackers alter supplier bank details rather than fabricate the invoice.
The headline numbers are large and rising. The FBI's Internet Crime Complaint Center recorded more than $3bn in reported business email compromise losses in the United States in 2025, making it the second most costly category of cybercrime after investment fraud. The Association for Financial Professionals found in its 2025 survey that 63 per cent of treasury practitioners named business email compromise as their leading avenue for payment fraud attempts.
Artificial intelligence is widening the gap between attack and defence. The Association of Certified Fraud Examiners reports that 75 per cent of anti-fraud professionals have seen an increase in generative AI document fraud and forgery over the past two years, while only 7 per cent describe their organisations as more than moderately prepared to counter it. Regulators are responding: Nacha, which governs US bank-to-bank payments, tightened its rules in 2026 to push for stronger fraud monitoring and faster recovery of stolen funds.
What changes for Basware's customers?
In the near term, very little changes operationally. Basware says it serves more than 6,500 customers, and for them the deal adds an optional assurance layer rather than forcing a migration. Trustpair's existing clients keep their current workflows and integrations.
The longer-term prize is data. Basware holds context spanning roughly 2.5 billion invoices and 20 million suppliers; Trustpair brings fraud-specific intelligence on account ownership.
Pooled, the two datasets could let the combined company spot risk earlier and automate more of the validation that finance teams still do by hand. That is the strategic rationale, though it also concentrates a large volume of supplier and payment data under a single owner, a trade-off finance teams weighing the open-ecosystem promise will want to track.
What does the deal signal about Accel-KKR's strategy?
It signals a roll-up. Trustpair is the fourth acquisition Basware has made since 2023, following Glantus, AP Matching and Redmap, and the company is backed by private equity firm Accel-KKR. The pattern is a deliberate buy-and-build in software for the office of the CFO, assembling invoice processing, reconciliation and now payment fraud prevention into one stack.
FinanceX readers have seen the same investor move elsewhere in the same market. In March 2026, Accel-KKR took a majority stake in UK bank-integration and payment automation provider AccessPay, another business selling into the CFO's office. Trustpair's own backers, Tikehau Capital, Breega and Axeleo Capital, who together put roughly €20m into the company, will continue to support it. For a market that has long treated fraud prevention as a bolt-on, the direction of travel is clear: it is becoming a standard component of purchase-to-pay software rather than a separate purchase.
Why This Matters to FinanceX Readers
For finance leaders, the practical takeaway is that invoice accuracy and payment security can no longer be managed as two separate controls. The data is unambiguous that supplier bank details have become the primary target for payment fraud, and a check that validates the document while ignoring the destination leaves the expensive gap open.
For investors, the deal is another marker in the consolidation of office-of-the-CFO software, with a well-capitalised private equity platform buying the pieces that turn automation into governed, fraud-resistant workflow. The undisclosed terms leave the valuation question open, but the strategic logic of owning both the invoice and the payment check is hard to argue with as fraud losses climb.
