A three-way match in accounts payable is a verification step where three documents from the same purchase — the purchase order, the receiving report, and the vendor’s invoice — are compared before payment is released. If quantities, prices, and terms line up across all three, the invoice is approved. If they don’t, payment is held until someone figures out why. That single checkpoint prevents overpayments, catches billing errors, and produces the paper trail auditors and tax authorities expect to see.
The Three Documents Being Matched
The Purchase Order
The purchase order comes out of procurement and functions as the company’s formal offer to buy. It lists the specific items or services requested, quantities, agreed unit prices, payment terms such as Net 30 or Net 60, and the vendor’s name. Each purchase order carries a unique tracking number that follows the transaction through receiving, invoicing, and payment. That number is how accounts payable links the three documents together, sometimes months after the order was placed.
The Receiving Report
When a shipment arrives, warehouse or receiving staff generate a receiving report that documents what actually showed up. It records quantities received, the condition of the goods, and any shortages or damage noted at delivery. On freight shipments, the bill of lading can serve as a supplementary record because it captures piece counts, shipment weight, and carrier details from the origin point. The receiving report is the company’s internal proof that goods changed hands, and it’s the document that turns a two-way check into a three-way one.
The Vendor Invoice
The vendor’s invoice is the request for payment. It lists the total amount due, line-item descriptions, unit prices, applicable taxes, and the vendor’s payment instructions. Most invoices also include the vendor’s tax identification number, which the business needs for year-end tax reporting. The invoice is the trigger: nothing moves toward payment until it arrives and gets checked against the other two documents.
How the Verification Actually Works
The matching process runs two comparisons. First, the invoice is checked against the purchase order to confirm that the billed prices match the prices the company agreed to pay. This catches unauthorized surcharges, price increases the vendor never negotiated, and simple billing mistakes. Second, the invoice is checked against the receiving report to confirm the company is only paying for goods that actually arrived. If the invoice bills for 100 units but receiving logged only 95, that five-unit gap is flagged before any money moves.
In a manual environment, a clerk reviews the three documents side by side and initials each line item that matches. That works, but it doesn’t scale once a company processes more than a few hundred invoices a month. Enterprise resource planning software and dedicated AP automation tools handle the same comparison by pulling data from scanned invoices with optical character recognition and checking it against digital purchase order and receiving records, keeping a full audit trail of every match, exception, and approval.
Tolerance Thresholds
Perfect matches on every line item are rare. Rounding differences, freight adjustments, and small tax variations create discrepancies that aren’t worth investigating one at a time. Most organizations set tolerance thresholds so invoices can auto-approve when differences fall inside an acceptable band. A common configuration allows a net unit price variance of 5 to 10 percent before a mismatch is flagged, though the right threshold depends on the value and risk profile of what you’re buying.p>
Set tolerances too tight and the AP team drowns in exceptions over pennies. Set them too loose and the matching defeats its own purpose. Most companies start conservative and adjust after reviewing exception data for a quarter or two.
What Happens When the Documents Don’t Match
When the three documents disagree, the system generates an exception and places an automatic hold on payment. The AP team then investigates whether the mismatch came from a vendor billing error, an internal recording failure, or a legitimate change in the order.
Price Mismatches
Price differences between the invoice and the purchase order are the most common exception. Sometimes the vendor applied an outdated price, sometimes a discount wasn’t reflected, sometimes it’s a data-entry error on either side. Resolution usually involves asking the vendor for a credit memo or a revised invoice that reflects the contracted price, with every communication documented so the audit trail stays intact.
Quantity Shortages
When the receiving report shows fewer units than the invoice bills for, the business has two options: reject the invoice and request a corrected one, or short-pay the invoice for only the quantity received. Short-paying is faster but creates its own headaches if it isn’t handled cleanly. The vendor needs a written explanation of what was deducted and why, ideally sent to their accounts receivable or order management team before the short payment lands. Without that, the vendor treats the underpayment as a delinquency and the same invoice keeps cycling back as an open item. As a practical matter, most AP departments don’t bother short-paying for differences under $50 because the administrative cost of managing the exception outweighs the savings.
Tax and Shipping Variances
Sales tax on invoices often differs from estimates on purchase orders, especially when goods cross state lines or tax rates change between order and delivery. Small tax variances usually clear through the tolerance thresholds. Larger ones require verifying the correct rate for the delivery jurisdiction and working with the vendor to reissue the invoice. Shipping and freight charges that appear on the invoice but weren’t on the purchase order need similar checking to confirm they were authorized.
When a Three-Way Match Doesn’t Apply
Three-way matching assumes a physical delivery that can be counted. That assumption breaks down for several common purchases. Consulting engagements, software licenses, recurring subscriptions, and professional services don’t produce a receiving report in the traditional sense. For these, most companies fall back to two-way matching between the purchase order and the invoice, sometimes supplemented by a signed service confirmation, a project manager’s approval, or a timesheet verifying hours worked. Utility bills, rent, and other recurring fixed-cost obligations also bypass three-way matching because the amounts are set by contract. Forcing every payment through a three-way check just creates bottlenecks without adding real control. The better approach is to define which purchase categories require three-way matching and which can go through simpler workflows, then document the policy so auditors can see the logic.
Why Businesses Use It
Fraud Prevention Through Segregation of Duties
Three-way matching is one of the most effective controls against accounts payable fraud because it requires independent verification from multiple departments. The person who creates the purchase order in procurement is not the person who signs the receiving report in the warehouse, and neither of them processes payment in accounts payable. Committing fraud requires collusion across departments rather than a single employee acting alone.
The control is particularly effective against fictitious vendor schemes, where someone inside the company creates a fake vendor and submits invoices for goods or services that were never ordered or delivered. A three-way match catches this because there is no legitimate purchase order authorizing the buy and no receiving report confirming delivery. The same logic applies to duplicate billing: the matching system flags the second invoice because the receiving report quantities were already consumed by the first. Organizations with anti-fraud controls in place experience significantly lower median fraud losses than those without them, and the duration of fraud schemes drops by 14 to 50 percent when controls are actively enforced.
Sarbanes-Oxley Compliance
For publicly traded companies, three-way matching is part of the internal control framework the Sarbanes-Oxley Act requires. Section 404 mandates that every annual report filed with the SEC include a management assessment of the company’s internal controls over financial reporting, together with an auditor’s attestation of that assessment.1Office of the Law Revision Counsel. U.S. Code Title 15 – 7262 Management Assessment of Internal Controls Three-way matching is one of the controls auditors look for when evaluating whether an accounts payable process is reliable enough to produce accurate financial statements.
The consequences of getting this wrong are severe. Under a separate provision of the Act, corporate officers who certify financial reports knowing the reports don’t comply with requirements face fines up to $1,000,000 and up to 10 years in prison. If the false certification is willful, penalties rise to fines up to $5,000,000 and up to 20 years in prison.2Office of the Law Revision Counsel. 18 USC 1350 – Failure of Corporate Officers to Certify Financial Reports Weak AP controls that allow material misstatements are exactly the kind of problem that puts officers at risk under these provisions.
IRS Recordkeeping
The IRS requires businesses to maintain records that clearly show income and expenses, and the agency specifically identifies invoices as supporting documents that must be kept to substantiate business deductions.3Internal Revenue Service. Publication 583 – Starting a Business and Keeping Records For each purchase or expense, records should identify the payee, the amount paid, proof of payment, the date incurred, and a description showing the payment was for a legitimate business purpose.4Internal Revenue Service. What Kind of Records Should I Keep
A working three-way match generates exactly the documentation the IRS expects: purchase orders showing what was authorized, receiving reports showing what was delivered, and invoices showing what was paid. Keep these records for at least three years from the date you file the return that reports the expense. If you underreport gross income by more than 25 percent, the retention period extends to six years.5Internal Revenue Service. How Long Should I Keep Records Records supporting asset purchases should be kept until the statute of limitations expires for the year you dispose of the asset, because the original invoice establishes your cost basis for depreciation.
The Cost of Broken Matching
When matching exceptions pile up and invoices sit unresolved, the financial consequences reach beyond the AP department’s workload. Most vendor contracts include late payment penalties of 1 to 3 percent per month on overdue balances. On a $50,000 invoice sitting unresolved for 60 days, that’s $1,000 to $3,000 in avoidable penalty charges. Federal contractors carry an additional layer of exposure. The Prompt Payment Act requires federal agencies to pay interest on late invoices at a rate set by the Treasury Department, currently 4.125 percent per year for the first half of 2026.6Federal Register. Prompt Payment Interest Rate; Contract Disputes Act Interest accrues from the day after the required payment date until payment is made, and agencies must pay these penalties automatically without the vendor requesting them.7Office of the Law Revision Counsel. 31 USC 3902 – Interest Penalties