Accounts Payable Controls for Freight Invoices: How to Prevent Overpayments

The accounts payable controls that matter most for freight invoices are: verified carrier master data, duplicate detection that looks beyond invoice numbers, validation of each charge against the contract and shipment records, approval thresholds, segregation of duties, bank change verification, a complete audit trail, and post-payment review. Together they stop overpayments before money leaves and catch the ones that slip through.

Generic AP controls were built for invoices that match a purchase order and a goods receipt. Freight invoices rarely do. That's why a finance team with strong controls everywhere else can still overpay carriers without anyone noticing, and why freight usually needs a few controls of its own.

Why freight invoices need their own AP controls

Most accounts payable internal controls rest on the three-way match: a purchase order, a goods receipt, and an invoice that agree with each other. Freight breaks that model in four ways.

There's usually no purchase order per load, so there's nothing fixed to match against. The "receipt" isn't a document but a series of events, like pickup, arrival, wait time, and delivery. Many charges, especially accessorials, depend on those events and get added after the fact. And the party you pay can change mid-stream when a carrier sells its invoices to a factoring company.

The result is that a freight invoice can pass every standard AP check and still be wrong. The controls below are built around that gap. For more on why the standard match falls short, see our post on why three-way matching was built for purchase orders, not freight.

Where the controls sit

A freight invoice moves through five steps: intake, validation, approval, payment, and post-payment review. Each of the eight controls below protects one or more of them.

Most of these controls exist in some form in any finance team. The freight-specific work happens at intake and validation, where duplicates and unsupported charges get through standard checks.

Eight AP controls for freight invoices

1. Verified carrier master data

Every carrier should be set up once, properly, before the first payment. That means confirming its operating authority in FMCSA's records, collecting a Form W-9 for tax reporting, and recording remittance details from a verified source. Limit who can create or edit carrier records, and review the vendor master periodically for duplicates and inactive carriers.

2. Bank change verification

A request to change a carrier's bank details is one of the most common routes for payment fraud. Business email compromise remains among the highest-loss categories in the FBI's Internet Crime Report. Treat every change request as unverified until someone calls the carrier on a number already on file, and log who verified it and when.

3. Duplicate detection that looks beyond invoice numbers

Duplicate freight invoices rarely share an invoice number. A carrier bills, then its factoring company bills the same charges under a new reference, or a resent invoice gets keyed in by someone else. At the same time, one load can legitimately carry several invoices, such as linehaul, a separate detention bill, and a corrected rebill. So a good duplicate check compares the load, the carrier, the charge type, the amount, and the billing history together, and stops any charge that matches one already approved or paid. We've written more about why duplicate freight invoices don't look like duplicates.

4. Validation against the contract and the shipment record

Each charge should be checked against what you agreed, meaning the rate confirmation, contract, or tariff, and against what happened, meaning PODs, facility timestamps, and other trip records. Set tolerances for small variances you're willing to accept. Anything outside them goes to an exception queue with the evidence attached, rather than being approved by default.

5. Approval thresholds

Define who can approve what. A typical setup lets invoices that pass validation clear automatically, routes exceptions to a freight specialist, and sends larger or unusual amounts to a manager. Write the thresholds down and make sure the system enforces them, not just the policy document.

6. Segregation of duties

The person who approves invoices shouldn't be able to edit carrier bank details or release payments. In small teams this can feel impractical, so use system permissions and a second reviewer for the riskiest actions, such as bank changes and manual payments.

7. A complete audit trail

For every invoice, you should be able to show who approved it, when, under which rule, and what evidence supported each disputed or adjusted charge. That record is what makes your controls testable. Without it, a control that works in practice can still fail an audit.

8. Post-payment review and reconciliation

Some errors only surface later, like a rate change loaded late or a factor billing weeks after the carrier was paid. Review paid invoices periodically, reconcile freight accruals to actual invoices at month end, and pursue recoveries in writing. Payments to factoring companies should follow an effective notice of assignment, and you're entitled to ask for reasonable proof before redirecting payment.

What auditors look for in freight AP controls

Public companies must assess their internal control over financial reporting under Section 404 of Sarbanes-Oxley, and many use the COSO Internal Control framework to structure that work. Private companies often face similar testing from external auditors, lenders, or investors. Either way, auditors want evidence that each control exists and actually runs.

How to tell whether your controls are working

A control that exists on paper isn't the same as one that works. A few measures show the difference:

• The share of freight invoices validated before payment, ideally all of them
• The exception rate, and how long exceptions take to resolve
• Duplicate charges caught before payment
• Bank change requests verified by phone, which should be every one
• Manual payments and approval overrides, which should be rare and explained

For payment-side measures such as on-time payment rate and cycle time, see our guide to managing freight invoice payments.

Bringing it together

Many freight overpayments come from invoices that pass standard AP checks, because those checks weren't designed for freight. Closing that gap takes a handful of freight-specific controls, mainly smarter duplicate detection and validation against shipment records, on top of the controls you already run.

Start with the two that carry the most risk: bank change verification, because a single redirected payment can be unrecoverable, and evidence-based validation, because it touches every invoice. Then make sure every decision leaves a trail. That trail is what lets you prove the controls work when an auditor asks.

Where Penny fits

Penny is TransportOne's AI freight auditor, and it handles control four, validation against the contract and the shipment record, for every invoice. That's the control that's hardest to run by hand, because it means pulling the right records for each load and checking each charge against them.

For each invoice, Penny checks the charges against the contract, the load plan, and the trip records, including the POD, facility timestamps, and telematics data, across truck and ocean freight. Supported charges clear into your normal payment run. Unsupported ones are flagged with the evidence attached, which gives your team a ready-made record of why each charge was approved or disputed. Penny audits before payment and after payment, which also supports control eight.

Penny doesn't replace your AP system or your approval rules. It works on top of your existing TMS and ERP, goes live in under 30 days, and you pay 30% of what it recovers. See how Penny audits carrier invoices.