Accounts Payable Recovery Audit vs. Statement-Led Recovery

A recovery audit finds overpayments after they leave your account, and the auditor keeps a share of whatever comes back. Statement-led recovery finds the same money each month, by checking supplier statements against your ledger before the trail goes cold.

A Head of AP at a manufacturer with thousands of suppliers usually meets this choice at year-end. Someone proposes a recovery audit because there is no upfront fee. Nobody asks why the money needs recovering in the first place.

This guide compares the two routes on fees, lookback, speed and data. It also covers what a recovery audit finds, what it cannot, and where KlearStack fits as software that is not priced on recoveries.

TL;DR

1. A recovery audit is a look-back for money already paid in error, usually paid for with a share of what is recovered.
2. It typically finds duplicate payments, overpayments, missed discounts and unclaimed credits.
3. “No upfront fee” is not “no cost”: the commission is paid on money that left because a check did not run.
4. Supplier statements show duplicates, unapplied credits and missing invoices within a month of the error.
5. A recovery audit still wins on contract pricing, tax and rebate errors that statements cannot show.
6. The Control Tax Test: sort your last audit’s findings by age, and count what a monthly check would have caught.
7. Checks before payment are cheaper than recovery, and fraudulent payments are rarely recoverable at all.
8. Start by running 12 months of supplier statements through the Supplier Statement Agent.

Run your supplier statements through KlearStack and see what an audit would have billed you for

What Is a Recovery Audit?

An accounts payable recovery audit is a detailed look back at past payments to find and reclaim money lost to billing and payment errors. A third-party firm reviews invoices, payments and procurement data, then asks suppliers for refunds or credits on what it finds.

Most firms are paid a contingency fee, a percentage of the funds actually recovered. Apex Analytix describes this as the most widely used model, and Xelix quotes commissions of roughly 10% to 40%.

A Financial Controller should note one word in that definition: past. Recovery audits are reactive by design. Xelix itself says they form part of a reactive process and can take months to recoup payments.

What Does an AP Recovery Audit Typically Find?

An AP recovery audit typically finds four kinds of loss: duplicate payments, overpayments against agreed prices, missed early-payment discounts and unclaimed supplier credits. Each one begins as a small error in an ordinary payment run, and each is invisible to the person who made it.

• Duplicate payments: the same invoice paid twice, often under a different invoice number or vendor record.
• Overpayments: a price, quantity or tax amount above what the contract or order allowed.
• Missed discounts: early-payment terms that were available and not taken.
• Unclaimed credits: credit notes, returns and rebates issued by the supplier and never applied.

A Head of Shared Services will recognise the pattern. These are not failures of one person; they are what a high-volume payment run produces when no check compares your ledger with the supplier’s. Our guide to tools to prevent duplicate invoices covers the first category in detail.

Unclaimed credits deserve their own mention because they are the easiest to lose. A credit note that arrives by email may never reach the ledger, and credit note data extraction is the step that decides whether it does.

What Is the AP Audit Process?

An AP audit is a control review of the payables function, not a recovery exercise. Auditors test whether payments were authorised, matched and recorded correctly, and they report what the process failed to catch. A recovery audit, by contrast, hunts for specific refundable amounts.

A statutory or internal auditor typically works through this sequence:

1. Confirm that written AP procedures exist and match what happens in practice.
2. Vouch a sample of payments back to the purchase order, invoice and receiving record.
3. Test whether paid invoices passed the three-way match before approval.
4. Compare vendor statements with the AP ledger and investigate the differences.
5. Confirm balances with major suppliers and look for unrecorded liabilities.
6. Examine supplier accounts carrying debit balances.

Step 4 is the bridge to this guide. It is a sample, taken once a year, by someone looking at a fraction of suppliers. Our guide to audit software for finance teams covers the tooling around it.

What we see in AP teams is that the year-end statement sample is where most unapplied credits first surface. By then they can be eleven months old, and the supplier may have reallocated the cash.

Recovery Audit Services vs Software: Fees, Lookback, Speed and Who Keeps the Data

The two routes differ on four points: payment, lookback, speed and data. The table puts them side by side for a CFO or controller comparing options.

No Upfront Fee Is Not No Cost

The assumption is that a contingency fee costs nothing, because you pay only when money comes back. The reality is that the fee is paid on money that was already yours, and it left because a check did not run. A Head of Procurement who approves a contingency audit has approved a commission on the company’s own cash.

That does not make recovery audits a bad purchase. For a first look at years of history, a commission-only audit is often the right answer. The mistake is making it the only answer, and repeating it every year.

The Control Tax Test: Price Your Missing Control

The contingency fee is a control tax. It is the percentage you pay on money a monthly check would have caught within a month. To price yours, take your last audit report and sort the findings by type and age.

Count every duplicate payment, unapplied credit and missing invoice older than 90 days, then multiply their recovered value by the fee rate. Take an illustrative audit that recovers $2M at a 25% fee. If three-quarters of that was statement-visible, about $375,000 of the $500,000 fee is control tax.

See how much of your last audit’s fee was control tax

Statement-Led Recovery: Catching Unapplied Credits Every Month

Statement-led recovery means comparing every supplier statement with your AP ledger each month, and treating each difference as a recoverable item until proven otherwise. The supplier’s ledger already holds the credits, duplicates and missing invoices; the statement is how that ledger reaches you.

Our guide to supplier statement reconciliation covers the five-step process in detail, and vendor reconciliation in accounts payable covers the discrepancy types. The difference here is purpose. Reconciliation confirms your books; statement-led recovery treats each variance as money to claim.

KlearStack does this through the Supplier Statement Agent, inside Supply Chain Document Compliance. The agent reads each statement and reconciles it against your ledger. It lists the lines with no match, so an unrecorded credit shows as a difference, and logs each comparison as an audit trail.

In India the timing matters twice. A supplier’s credit note under Section 34 of the CGST Act reduces your input tax credit, so the matching ITC is reversed.

For a 2025-26 supply, the supplier must declare it by 30 November 2026, or the annual return date if earlier. The tax side moves by itself, but the cash side only moves if the credit is applied in your ledger.

KlearStack takes the drudgery of reading and matching; your team keeps the judgment and the final decision on every claim, including every supplier dispute. Statement-led recovery does not replace a recovery audit for pricing or tax errors, and it needs suppliers that issue statements. It stops the steady leak of duplicates and credits.

💡 Tip for AP and shared services teams

Start with your ten suppliers that send the most credit notes, not your ten largest by spend. Credit-heavy suppliers hold the unapplied balances that a spend-ranked sample misses.

Stop It Before You Recover It: Checks Before Payment

The cheapest recovery is the payment that never went out. A Head of Internal Audit can ask for three checks before payment: order and receipt match, earlier-invoice test and supplier record. Three-way matching in accounts payable covers the first of them.

The reason is that not every wrong payment can be recovered. A duplicate to a genuine supplier is a refund request. A payment redirected by a fraudster is a loss, because nobody is obliged to give it back.

📊 76% of US organizations hit by payments fraud in 2025

AFP’s 2026 Payments Fraud and Control Survey found 76% of organizations experienced attempted or actual payments fraud in 2025, and 74% were affected by business email compromise. Recovery audits are not built to reverse payments sent to a fraudster.

Source: AFP, 2026 Payments Fraud and Control Survey

Two of those checks double as fraud controls. Our guides to invoice fraud detection and vendor fraud detection cover what a supplier-record check should include.

The pattern across audit cycles is that recovery lists and prevention gaps are the same list. The suppliers with the most recoveries tend to be the suppliers with the most vendor-master duplicates, and fixing the master data shrinks next year’s claim.

How to Choose AP Recovery Audit Software

Choose AP recovery audit software by asking what it checks, when it checks, and what it shows your auditor. A Procurement or AP Director can use six questions, and a tool that cannot answer them is a recovery audit with a login.

1. Does it check payments before they go out, or only report on payments already made?
2. Does it compare your ledger with supplier statements, not only with your own invoices?
3. Does it read statements and credit notes in whatever format suppliers send?
4. Does every comparison leave a logged result your auditor can replay?
5. Is it priced on your documents and volume, or on a percentage of what it recovers?
6. Does it leave the decision on each claim with your team?

One more test is exceptions. Ardent Partners’ 2026 AP benchmarks put the average invoice exception rate at 19.9%, so any tool must handle a fifth of invoices needing attention. Our guide to the best invoice reconciliation software compares the wider category.

When This Is Not a Fit

If your supplier base is a few dozen suppliers, a spreadsheet and a calendar reminder may be enough. If your largest losses are pricing, tax or rebate errors, a recovery audit is the better first step. If suppliers do not issue statements, statement-led recovery has nothing to read.

Conclusion

An AP recovery audit is a sensible way to review history and a poor way to run a payments function. Statement-led recovery shifts the work to the month the error happens, and checks before payment shift it to before the money leaves. The fee you save is the control tax you stop paying.

The cost of waiting is not only the commission. APQC’s benchmark puts the median organization at 1.5% of disbursements paid in error, and a recovery audit returns only part of that, minus its fee. The rest stays with the supplier.

The job at risk is not the clerk who paid the duplicate. It is the controller who signed off a payment run that nobody compared with the supplier’s own ledger.

Run 12 months of supplier statements through the Supplier Statement Agent

FAQs