Payroll registers and direct-deposit forms are the most sensitive email in town.
A bookkeeping or payroll practice emails bank statements, employee SSNs, pay rates and routing numbers for dozens of client businesses every week — and is a business-email-compromise target because of it. PXCMail encrypts the sensitive ones automatically, flags payment-change requests on the way in, and keeps a per-client archive.
| Message | Detected | Action |
|---|---|---|
| Payroll register → client | SSN · bank | 🔒 Encrypted |
| ACH file → bank | Routing / account | 🔒 Encrypted |
| QuickBooks invite | — | TLS ✓ |
| Bank statement → personal gmail | Account numbers | Blocked · policy |
Overview
Direct-deposit change fraud
“Please update my bank account for this Friday’s payroll” from a lookalike address is the classic payroll scam. Inbound checks flag it with a red banner.
Per-client archive
Search every message about one client business for a dispute, an audit, or an offboarding handover.
Safeguards Rule for service providers
Your CPA-firm clients must have an addendum with you; ours is pre-written and names the controls.
Moments that matter
- Client sends last month’s bank statement PDF — account numbers detected, your reply encrypted.
- New hire paperwork with SSN and I-9 — encrypted automatically.
- “Change my direct deposit” from an employee’s personal address — banner: verify by phone.
- Client leaves — export their archive, certificate of destruction for the rest.
Works beside
QuickBooks Online, Xero, Gusto, ADP Run, Paychex, Bill.com, Karbon, Jetpack Workflow. PXCMail is email; nothing to integrate.
Pricing
Gateway $6 · Gateway + 7-year archive $9 per seat.