Professional services firms rarely think of themselves as having an accounts payable problem. Their cost base is heavily payroll. Their non-payroll spend is concentrated in a handful of tech vendors, real estate and a long tail of occasional suppliers. The headline AP picture looks benign. Beneath it sits a structurally fragile posture that the benchmark surfaces when the data is read carefully.
Key takeaways
The small-but-fragile AP profile
Professional services AP looks small on a balance sheet view. Most firms spend 60 to 75 per cent of revenue on payroll. The remainder splits across rent, technology, professional indemnity, sub-contracted experts and a long tail of low-volume vendors.
Three features of that profile produce structural risk.
Concentrated technology vendors. A single legal practice management system or audit platform contract can run into seven figures annually. The failure mode is not late payment, it is mispayment under fraud conditions. A single switched bank detail on a major vendor invoice is a large absolute loss.
High-value occasional suppliers. Expert witnesses, sub-contracted specialists and one-off consultants invoice infrequently and in significant amounts. Each invoice triggers a verification cycle that the team is not running at scale, which is precisely where impersonation attacks succeed. This is the structural reason AP fraud is moving toward professional services faster than the sector expects.
Subcontracted experts. Professional services firms commission specialists on a project basis. Those specialists are often paid late because they sit outside the firm's regular supplier base, and the irregularity itself is the risk.
The fraud and verification angle
The single highest-loss class of AP fraud in professional services is bank-detail switching on high-value occasional suppliers. The reasoning is structural. The verification function in the firm is calibrated for regular suppliers paid in regular amounts. An occasional supplier invoicing for the first time in eighteen months bypasses the heuristics the team uses to catch anomalies.
Where this lands is in single-event losses that can run into hundreds of thousands of pounds. The volume is low. The severity is high. The risk profile does not look like the construction or retail late-payment story. It is its own pattern. The convergence point sits in supplier verification and payment behaviour are converging.
What the benchmark shows
Professional services sits in the top quartile of UK sectors for payment timeliness against terms. The headline number flatters the picture, however, because the bulk of the sector's spend is structurally regular: payroll, rent, recurring technology contracts. The behaviour against the long tail of occasional suppliers is meaningfully worse than the headline.
Exception rates on new supplier additions are also above the sector mean. Professional services firms onboard occasional suppliers more frequently than retail or hospitality, and the onboarding velocity outstrips the verification capacity of most finance teams.
What partnership models do not solve
Many professional services firms address AP risk through partner-level approval. Partners sign off on payments above a threshold. The model is well intentioned and has a place, but it does not address the dominant failure modes.
Partners are time-poor. The approval becomes a rubber stamp on documentation prepared by someone else. The verification work, the actual control, sits with the AP team. The signature is governance, not control.
It also does not address the occasional supplier verification problem. A partner who has worked with the expert witness once cannot reliably verify whether the bank details on the second invoice match the bank details on the first. The control needs to be data-driven, not relationship-driven.
What infrastructure does
Three controls close most of the gap.
Continuous identity on high-value vendors. The firm's top fifty suppliers are kept verified on a rolling basis. Beneficial ownership changes, entity changes and sanctions changes all flow through automatically. This is the operational read on the supplier identity graph.
Behavioural baselining on occasional suppliers. Even where a supplier invoices the firm once a year, the network sees their pattern across all their other buyers. The firm consumes that baseline rather than building its own.
Exception sharing on bank-detail changes. A change that emerges on multiple buyers' instances of the same supplier becomes a near-certain compromise signal. The firm benefits from the network's earliest detection.
The supplier-side angle
The same firms that worry about their own AP risk are themselves paid late by their clients. Advisory firms working for corporate clients absorb client lateness and then delay their own suppliers as a result. The behaviour pattern is the same as creative agencies, with different language. Reading the firm's payment record across both sides of the network is the only way to see the full picture.
Regulatory note
Professional services firms operating in regulated environments, particularly law and audit, carry SRA, ICAEW and similar oversight that increasingly looks at financial controls as part of broader regulatory posture. A demonstrable supplier verification control is increasingly part of the conversation, not separate from it. Sanctions screening sits in the same conversation.
Sources
FAQs
.jpg)