7 Red Flags of a Ghost Vendor in QuickBooks

By Invoice Auditor Team · 2026-06-17

A Single Red Flag Is a Coincidence; Multiple Red Flags Is a Pattern

Ghost vendors — payees in QuickBooks that don't correspond to real suppliers — are one of the most common vectors for billing schemes. But each individual red flag can look innocent on its own: lots of legitimate vendors lack a tax ID or have round-number bills. The key is looking for convergence — when the same vendor carries multiple flags, it stops being a coincidence. Here are the seven red flags to watch for.

1. No Tax ID or 1099 Setup

A vendor billing thousands of dollars with no tax ID on file and no 1099 setup is the most common ghost-vendor signal. Legitimate businesses providing services above $600 typically provide a W-9. A vendor that's billed $8,000+ with no tax documentation deserves a phone call — not an accusation, just verification.

2. Created and Immediately Paid Large Amounts

A vendor record created last month that already has a $7,500 bill paid. New vendor relationships typically start small — a sample order, a trial engagement. Immediate large payments on a brand-new vendor are worth confirming.

3. No Contact Information — No Phone, No Address, No Email

In a digital age, a vendor with literally no way to reach them is unusual. Even sole proprietors working from home typically have at least a phone number or email. A completely contactless vendor receiving regular payments should raise an eyebrow.

4. Name Suspiciously Close to a Real Supplier

'Acme Supply' and 'Acme Supply Co.' — one is legitimate, the other was created to route payments. Minor name variations on what appears to be the same vendor are often duplicate records, but they can also be deliberate. Invoice Auditor detects these near-duplicate names and flags them for review.

5. Round-Number Bills, Every Time

Real invoices rarely come out to exactly $5,000.00, every single time. Legitimate bills have varied amounts with cents. A vendor whose bills are always round numbers — $4,000, $5,000, $7,500 — may be perfectly legitimate (retainers, fixed fees), but the pattern is one of the forensic fingerprints worth noting.

6. Dormant Record That Suddenly Starts Billing

A vendor created two years ago, never used, and suddenly receiving bills this month. Could be a legitimate new engagement — or could be someone reactivating a dormant record because the creation date makes it look established. Confirm with the person who authorized the new relationship.

7. Payee Name Changed Mid-Year

A vendor whose payment name or bank details changed since they were first set up. Vendors do change their banking information legitimately, but it's also a classic fraud vector — alter the payee details, route the next payment to the fraudster's account. Every payee name or banking change should be independently verified with the vendor via a known phone number.

How to Verify Without Accusing

A red flag is not proof of fraud — it's a prompt to verify. Call the vendor at a number you independently look up (not the one on the vendor record). Ask to confirm recent invoices and payment details. Most flagged vendors turn out to be legitimate sole proprietors with incomplete paperwork. The handful that don't are exactly why this check exists. Invoice Auditor surfaces the vendors carrying multiple flags and lets you decide which ones deserve that phone call.

Run a free, read-only scan of your QuickBooks.

Start free scan