HICX Research Reveals Half of Enterprise Supplier Data is Outdated, Fueling Fraud Risks

New research reveals that approximately half of enterprise supplier data is outdated at any given time, creating significant vulnerabilities to fraud. For fintech and procurement professionals, this highlights a critical gap in data governance where sophisticated social engineering and geopolitical shifts are currently outpacing traditional, static supplier onboarding processes and manual verification methods.

What was announced

HICX has released findings from a study involving 50 leaders across procurement, finance, master data, and IT within large, complex enterprises. The analysis identifies a structural weakness in how global businesses protect themselves from fraud, specifically citing a failure to effectively scrutinise changes made to payment and bank data after the initial onboarding phase.

The research identifies four primary drivers increasing the risk associated with supplier data. Industrialised social engineering, including the use of deepfakes and real-time impersonation, is being used to authorise fraudulent payments. Simultaneously, geopolitical volatility and shifting sanctions require more frequent onboarding of new suppliers. Corporate activity, such as mergers and acquisitions, adds further complexity by introducing new entities and disparate Enterprise Resource Planning (ERP) systems. Finally, executive pressure to adopt AI has placed data governance higher on the corporate agenda.

To address these risks, HICX has updated its Supplier Registration capability. The enhancement ensures that any subsequent changes to a supplier record are routed through the same validation flow as the initial onboarding. This includes real-time checks for addresses, tax information, banking details, and sanctions. The system is designed to automatically block records that trigger mandatory failures. This capability is intended to be deployed as a standalone solution, typically within 28 days, allowing enterprises to secure their data without waiting for multi-year ERP consolidation or master data management programmes.

"The moment a supplier asks you to change where the money goes is when you are most exposed to increasingly sophisticated attacks, and in most businesses that change is still accepted by email on someone’s judgment. The answer is not to do less at onboarding. It is to apply the same rigour to every change that follows, for the whole life of the supplier relationship."

Dafydd Llewellyn, CEO of HICX

The companies involved

HICX is a supplier management platform specifically designed for large, complex enterprises. The company focuses on providing a central point of truth for supplier data, addressing the fragmentation that often occurs in global organisations operating across multiple jurisdictions and technical environments. By specialising in the data layer of the supply chain, the platform aims to improve data integrity and the overall supplier experience, which is often neglected in traditional procurement workflows.

In the broader market, HICX competes by offering a specialized alternative to the broader procurement suites provided by legacy ERP vendors. The company’s position is defined by its focus on data governance as a continuous process rather than a one-time event. This approach is increasingly relevant as enterprises face mounting pressure to improve transparency and resilience in their supply chains, driven by both rising fraud statistics and a volatile global economic landscape where supplier information changes rapidly.

What this means

The revelation that half of supplier data is inaccurate suggests that the industry's heavy investment in "clean" onboarding has created a false sense of security. As fraud losses are projected by Juniper Research to reach $58.3 billion by 2030, the traditional reliance on manual judgment for data changes is no longer a viable strategy. This announcement puts pressure on legacy ERP providers whose long implementation cycles often leave immediate security gaps unaddressed. The shift toward modular, real-time validation indicates a broader trend: the decoupling of data integrity from core transactional systems. The industry must now decide if it can continue to treat supplier data as a static record or if it must adopt continuous, automated verification to survive the rise of AI-driven social engineering.