Skip to main content
Remote Financial Services
HomeAboutPricingToolsContact
+1 (818) 321-4972 Book a free consultation
Article

Accounts Payable Process for Small Businesses: Workflow and Controls

A step-by-step accounts payable process for US small businesses: vendor setup with Form W-9, approval flow, three-way match, payment controls, and 1099 prep.

Remote Financial Services
Accounts Payable Process for Small Businesses: Workflow and Controls

For a US small business, the accounts payable (AP) process is the repeatable path a supplier invoice travels from vendor setup through approval, payment, bank reconciliation, and year-end Form 1099 preparation — with checks at each step so the business pays only what it actually owes. This guide is for US owners and small finance teams who run AP themselves or with one bookkeeper. The biggest limitation: in a small team the same person often requests, approves, and pays, which concentrates fraud risk, so the workflow below builds in segregation-of-duties alternatives sized for two- and three-person teams.

Quick answer

The accounts payable process has nine steps: (1) set up the vendor with a signed Form W-9; (2) issue a purchase order (PO) or confirm the scope of work; (3) receive the invoice in one central inbox; (4) match the invoice to the PO and the receiving record — the three-way match; (5) obtain documented approval; (6) schedule payment by due date and discount date; (7) release payment with a second person’s authorization; (8) post the payment and reconcile; and (9) roll calendar-year vendor totals into Form 1099 preparation. For a small team, the controls that matter most are simple: one person enters bills, a different person approves and releases payment, and the owner reviews the vendor list and AP aging every month.

AP sits inside the broader accounting operations and reporting cycle; this page covers only the invoice-to-payment procedure and its controls.

What is the accounts payable process?

Accounts payable is the money a business owes suppliers for goods or services already received but not yet paid for. Under accrual-basis accounting — the basis US Generally Accepted Accounting Principles (GAAP) uses — AP appears on the balance sheet as a current liability, and the expense is recorded when the bill arrives, not when cash leaves. A business keeping cash-basis books (common for small US tax returns) does not carry AP as a liability; it recognizes the cost when it pays. Federal Form 1099-NEC reporting follows the cash concept regardless of book basis: it tracks payments made during the calendar year. For management reporting, AP is usually monitored through an aging report that buckets unpaid bills as current, 1–30, 31–60, 61–90, and over 90 days past due.

The AP process is the controlled procedure that moves each bill from arrival to payment: vendor onboarding, purchase approval, invoice capture, matching, approval, payment release, posting, reconciliation, and year-end information-return preparation.

What does the invoice-to-payment workflow look like?

The swim-lane table below shows the full workflow with an illustrative role split for a small US business: a requester, a bookkeeper, an approver (owner or manager), and the system or bank. Adjust the names to your team; what matters is that no single lane controls a payment end to end.

Table 1: Invoice-to-payment swim lane for a small US business, from vendor setup to 1099 preparation (illustrative role split).

StepVendor / requesterBookkeeper (AP)Approver (owner or manager)System / bank
1. Vendor setupSubmits new-vendor request with signed Form W-9 and payment detailsChecks for duplicates; verifies legal name and taxpayer identification number (TIN); sets termsApproves every new vendor before the first orderVendor master updated; W-9 stored with the vendor record
2. Purchase and receiptIssues a PO or confirms scope; confirms goods or services receivedFiles the PO and receiving recordApproves the purchase commitmentPO number links order, receipt, and invoice
3. Invoice intakeVendor sends the invoice to a single AP inboxLogs the invoice; checks vendor, PO number, amounts, due dateInvoice enters the AP ledger with due and discount dates
4. Match and codeAnswers discrepancy questionsRuns the two-way or three-way match; codes the expense in the general ledger (GL)Resolves flagged mismatchesMatch status and GL coding recorded
5. ApprovalRoutes the matched invoice for approvalApproves or rejects; the owner approves higher-dollar invoicesApproval timestamped in the audit trail
6. Payment schedulingBatches approved invoices by due date and discount dateReviews the payment run against the cash forecastPayment run queued
7. Payment releaseVendor receives payment and remittance detailsPrepares the payment fileA second person releases the ACH (Automated Clearing House) or wire, or signs the checkBank applies dual authorization or positive pay
8. Post and reconcilePosts the payment, clears the bill, and reconciles the AP subledger to the bank and GLReviews the monthly AP aging and exceptionsReconciled balance feeds the month-end close
9. Year-end 1099 prepVendor confirms address or TIN if flaggedTotals calendar-year payments per vendor; flags reportable vendorsReviews and signs off on the 1099 listForms 1099-NEC e-filed through IRS systems

Interpretation: the four control points that do the heavy lifting are step 1 (only approved vendors exist), step 4 (nothing is paid that was not ordered and received), step 7 (no payment leaves on one person’s say-so), and step 8 (someone other than the payer confirms the books match the bank). Steps 1–7 are daily and weekly work; steps 8–9 are the monthly and annual close-out.

How should you set up vendors and collect Form W-9?

Vendor setup is where payment control starts, because every later control assumes the vendor is real and correctly identified. Collect Form W-9, Request for Taxpayer Identification Number and Certification before the first payment. The IRS describes its use this way (accessed July 27, 2026):

“Use Form W-9 to provide your correct Taxpayer Identification Number (TIN) to the person who is required to file an information return with the IRS” — Internal Revenue Service

The W-9 matters for two reasons. First, the payee’s name and TIN are what you report on Form 1099-NEC at year-end, and the IRS offers a TIN Matching service so payers can validate name/TIN combinations against IRS records before filing. Second, if a payee fails to furnish a correct TIN, the payer can be required to backup withhold. Per the IRS backup withholding page (accessed July 27, 2026):

“There are situations when the payer is required to withhold at the current rate of 24 percent.” — Internal Revenue Service

Backup withholding at 24% turns a missing form into your cash-flow problem, so treat “no W-9, no payment” as a standing rule. Two more setup practices:

  • Payments to corporations are generally exempt from 1099 reporting, but payments to attorneys and payments for medical or health care services must be reported even when the provider is incorporated — legal-service payments on Form 1099-NEC, medical payments on Form 1099-MISC — per the IRS information-return guidance (accessed July 27, 2026). Collect a W-9 from every vendor anyway, so the vendor certifies its own entity type.
  • Route any change to a vendor’s bank details through a call-back to a known phone number on file, not to the email that requested the change. Federal bank regulators are actively addressing payments and check fraud — see the FDIC’s June 2025 interagency request for comment (accessed July 27, 2026) — and vendor-payment diversion is a common channel for it.

What is a three-way match, and when do you need it?

A three-way match compares three documents before an invoice is approved: the purchase order (what was ordered, at what price), the receiving record (what actually arrived or was performed), and the vendor invoice (what is being billed). Payment proceeds only when quantities and prices agree within a set tolerance. A two-way match — PO to invoice, with no receiving document — is the common shortcut for services, where there is nothing to “receive” in the shipping sense.

No federal or state law requires a three-way match; it is an internal control, and its target is billing risk. In the Association of Certified Fraud Examiners’ (ACFE) Occupational Fraud 2026: A Report to the Nations (accessed July 27, 2026), asset misappropriation appeared in 90% of the 2,402 cases studied, and billing schemes — false or inflated invoices, often through fictitious vendors — ranked among the most significant risks when frequency and damage were weighed together. The same study found:

“More than half of all cases involved either a lack of internal controls or an override of existing controls.” — Association of Certified Fraud Examiners

Practical calibration for a small business: require the three-way match for inventory, materials, and equipment; use a two-way match plus written confirmation from the person who ordered the work for services; and set a dollar ceiling (an illustrative policy: invoices under $1,000 that match cleanly need a manager’s approval, anything above needs the owner’s) so scrutiny scales with risk. The specific thresholds are a policy choice, not a rule.

How should a small team segregate AP duties?

Segregation of duties means no one person can both create a payment and release it. That is easy with a five-person finance department and hard with one bookkeeper — yet small organizations are exactly where the exposure concentrates. The ACFE’s 2026 report press release (May 12, 2026; accessed July 27, 2026) reports that Certified Fraud Examiners estimate organizations lose 5% of revenue to fraud each year, that the median case in the study cost $104,000, and that small businesses experience the highest median losses of all organization sizes. These are global study figures, not a prediction for any one company.

When you cannot fully separate the roles, use compensating controls — cheaper checks that achieve a similar effect:

Table 2: Segregation-of-duties alternatives for one- and two-person AP teams.

Risk when one person runs APPractical small-team alternative
Fictitious vendor added and paidThe owner personally approves every new vendor and reviews the vendor-master change log monthly
Inflated or duplicate invoice paidTwo-way or three-way match before approval; the owner approves any invoice above a set dollar ceiling
Unauthorized ACH, wire, or check releasedBank-enforced dual authorization: the bookkeeper prepares, the owner releases; ask the bank about positive pay on check accounts
Vendor bank details silently changedCall-back verification to a known number before any banking change is applied
Errors or schemes hidden in the ledgerThe owner (or an outside reviewer) reads the AP aging and bank reconciliation monthly and questions anything unfamiliar

The bank-side rows are operational, not exotic: dual release and positive pay are standard treasury services, and the same FDIC-linked interagency payments and check fraud initiative reflects regulator attention to exactly these payment channels. If the team is one person deep, an outside bookkeeper can take over invoice entry, matching, and payment scheduling while the owner keeps approval and release rights — that split alone removes the end-to-end control problem.

Should you take early-payment discounts?

Many suppliers offer terms such as “2/10 net 30”: a 2% discount if you pay within 10 days, otherwise the full invoice is due in 30. Whether to take it is a financing decision, and the standard way to compare it is the annualized cost of skipping the discount:

Annualized cost of skipping = [discount % ÷ (100% − discount %)] × [365 ÷ (net days − discount days)]

For 2/10 net 30: (2 ÷ 98) × (365 ÷ 20) = 0.020408 × 18.25 ≈ 37.2%. Skipping the discount is equivalent to borrowing the discounted amount at roughly a 37% annual rate for the extra 20 days. The following is a hypothetical illustration with made-up inputs on a $10,000 invoice, assuming the business has a working-capital line at 9% APR (annual percentage rate).

Table 3: Early-payment discount decision on a hypothetical $10,000 invoice with 2/10 net 30 terms (made-up inputs).

ItemMethodAmount
Invoice face valuegiven$10,000.00
Early-payment discount$10,000 × 2%$200.00
Cash paid on day 10$10,000 − $200$9,800.00
Return for paying 20 days early$200 ÷ $9,8002.0408%
Annualized cost of skipping the discount(2 ÷ 98) × (365 ÷ 20)≈37.2%
Interest to borrow $9,800 for 20 days at 9% APR$9,800 × 9% × (20 ÷ 365)$48.33
Net benefit of borrowing to take the discount$200 − $48.33$151.67

Interpretation: the decision rule is to take the discount when the annualized cost of skipping (about 37.2% here) exceeds your marginal borrowing rate (9% here). At these invented inputs, even borrowing the money saves $151.67 per $10,000 invoice; at a borrowing rate above roughly 37%, paying on day 30 wins. Change the terms, the invoice size, or the rate and the answer moves — rerun the formula with your own numbers rather than adopting these.

How does AP feed the month-end close and 1099 preparation?

Monthly, AP closes out with three checks: the AP subledger agrees with the general-ledger control account, the bank reconciliation clears every payment, and the owner reviews the aging for surprises. On accrual-basis books, goods received but not yet invoiced are also accrued so expenses land in the right month. The full close sequence — task ordering, review, and sign-off — belongs to our guide to the small-business month-end close workflow, and the software side of speeding this up is covered in why businesses need real-time accounting; this page stays at the invoice-to-payment layer.

Annually, the same vendor payment data drives Form 1099-NEC (Nonemployee Compensation) preparation:

  • Reporting threshold. Per the IRS information-return guidance (accessed July 27, 2026), the reporting threshold for services performed by a nonemployee is $600 for payments made before 2026 and $2,000 for payments made in 2026, with an inflation-adjusted threshold for later years. Any amount of backup withholding triggers a filing regardless of the total. Because you cannot know in July which vendors will cross $2,000 by December, collect W-9s up front and track totals per vendor all year.
  • Deadline. Form 1099-NEC must be furnished to the recipient and filed with the IRS by January 31 following the payment year — the next business day when that date falls on a weekend or holiday, so tax-year 2025 forms were due February 2, 2026, and forms for 2026 payments are due February 1, 2027 — per the General Instructions for Certain Information Returns (accessed July 27, 2026). No automatic extension is available for Form 1099-NEC.

Electronic filing is mandatory at scale: if your business files 10 or more information returns in total (aggregating W-2s and all 1099 types), e-filing is required. Per the IRS IRIS e-file page (accessed July 27, 2026):

“Starting tax year 2023, if you have 10 or more information returns, you must file them electronically.” — Internal Revenue Service

The IRS Information Returns Intake System (IRIS) Taxpayer Portal is a free way to e-file, and using it requires an IRIS Transmitter Control Code, so apply ahead of the January filing season.

  • Record retention. The IRS instructions direct filers to keep copies of filed information returns (or be able to reconstruct them) for at least 3 years — 4 years if backup withholding was imposed — and the IRS recordkeeping guidance (accessed July 27, 2026) sets a general 3-year baseline for records supporting return items, with longer periods in specific cases. Insurers, lenders, or state rules may require longer retention.
  • State layer. Some states impose their own 1099 filing or withholding requirements in addition to the federal ones; the IRS instructions direct filers to their state and local tax departments for those rules. Federal thresholds in this article do not describe any state’s requirements.

FAQs

Is a three-way match legally required?

No. Matching is an internal control, not a federal or state requirement. It exists to catch billing errors and fictitious or inflated invoices before payment; the legal obligations in this area are the tax reporting rules (Form 1099-NEC, backup withholding) described above.

Do I need a Form W-9 from incorporated vendors?

Generally, payments to corporations are exempt from Form 1099 information reporting — but payments for attorneys’ services and medical or health care services are reportable even when paid to a corporation. Collecting a W-9 from every vendor at setup is still the safer practice, because the vendor certifies its entity classification and TIN to you in writing.

What is the difference between accounts payable and accounts receivable?

Accounts payable is what your business owes its suppliers; accounts receivable is what customers owe your business. AP is a liability on an accrual-basis balance sheet, receivables are an asset, and the AP process in this article is the payable side: bills in, payments out.

How long should I keep invoices and 1099 records?

The IRS baseline is 3 years for records supporting items on a tax return, 3 years for copies of filed information returns, and 4 years where backup withholding applied — with longer periods for specific situations such as bad-debt claims or unfiled returns. Check whether your insurer, lender, or state requires longer before discarding anything.

When are 1099-NEC forms due for 2026 payments?

For payments made during calendar year 2026, Form 1099-NEC is due to recipients and the IRS by February 1, 2027 (January 31, 2027 falls on a Sunday). If you file 10 or more information returns in total, you must e-file — the free IRS IRIS portal is one option, and early registration is wise.

The bottom line

Tightening your AP workflow means putting the nine steps on rails: onboard vendors with a signed W-9 before the first payment, centralize invoice intake, match before approving, scale approval dollars to risk, require a second person to release every payment, reconcile monthly, and let the same clean vendor data produce your 1099s in January. If that is the goal but your team is one person deep, our remote bookkeeping services can run invoice intake, matching, payment scheduling, and 1099 preparation while you keep approval and release rights — and the accounting operations and reporting hub maps how AP connects to the rest of your finance function.

This article provides general educational information about US accounts payable workflows, not tax, legal, or accounting advice. Federal thresholds, deadlines, and e-file rules change, and state requirements vary; confirm current IRS and state guidance, or consult a qualified tax or accounting professional about your specific facts, before acting.

#accounts payable process #AP workflow #three-way match #Form W-9 #internal controls #1099-NEC