CORAA
University · Fraud risk

Vendor Master Data Test Filter.

Paste a vendor master listing and pick the tests to run. The tool looks for vendors sharing a PAN or bank account, names that are the same once cleaned, and missing or badly formed PAN and GSTIN. Flags are leads for inquiry, not conclusions.

Vendor master and tests

Paste from Excel or CSV. Columns are found by header names; if a name is not recognised the default position above is used.

The format tests check only the pattern of the number. They do not confirm that the PAN or GSTIN is real or active. Verify on the official portals. A GSTIN is not required for every vendor, so a blank GSTIN is a prompt to ask, not an error.

Flagged vendors
Vendors read5
Vendors flagged4
Bank account shared with another vendor4
PAN shared with another vendor2
Same name as another vendor after cleaning2
GSTIN missing1
PAN format looks wrong1
PAN missing1
VendorNamePANBank accountFlags
V001Asha Traders Pvt LtdAABCA1234F501002345678PAN shared with another vendor; Bank account shared with another vendor; Same name as another vendor after cleaning
V002Asha Traders Private LimitedAABCA1234F501002345678PAN shared with another vendor; Bank account shared with another vendor; Same name as another vendor after cleaning
V004Kiran SuppliesKIRAN1234918020045671GSTIN missing; PAN format looks wrong; Bank account shared with another vendor
V003Northwind Logistics918020045671PAN missing; Bank account shared with another vendor

The vendor master is where fake vendors start.

Payments follow the vendor master, so a duplicate or fictitious vendor can be paid for years without a journal entry looking odd. Two vendors with one bank account, or the same name spelled two ways, are the classic signs. Missing tax numbers matter too, because they affect deduction of tax at source and input credit claims. Run these tests on the full master, then ask who created and approved each flagged vendor.

Duplicate payment test kitThree-way match checker

How the tests work

PAN and GSTIN values are upper-cased and stripped of spaces. Missing values are flagged. The format tests check the length and the pattern of letters and digits only.

The GSTIN contains the PAN of the holder in positions 3 to 12, so the tool compares that part with the PAN column when both are well formed.

Duplicates are found by counting PAN, bank account and cleaned name across the listing. Names are cleaned by removing punctuation and words such as Pvt, Ltd, LLP and Company.

Worked example — same vendor twice

Two vendors, "Asha Traders Pvt Ltd" and "Asha Traders Private Limited", with the same PAN and bank account.

Inputs
Vendor 1Asha Traders Pvt Ltd
Vendor 2Asha Traders Private Limited
Output
PANShared with another vendor
Bank accountShared with another vendor
NameSame after cleaning
Both records are flagged on three tests. This looks like one vendor entered twice, which can lead to duplicate payments.

Common mistakes

Treating a shared bank account as fraud
It can be a group of companies or a payment agent. Ask for the explanation and the approval.
Reading a format pass as verification
A well-formed number can still be invalid. Verify on the official portal.
Testing only active vendors
Include inactive records. Fictitious vendors are often switched off after use.

Frequently asked questions

What columns does the pasted data need?+
A header row, then vendor ID, name, PAN, GSTIN, bank account and address. Other orders work if the header names contain words such as name, PAN, GSTIN, bank or address.
Does it check whether a PAN or GSTIN is real?+
No. It checks only the pattern. Verify numbers on the official portals.
Is my data uploaded?+
No. Everything is processed in your browser.

Authoritative sources

ICAI — SA 240, The Auditor's Responsibilities Relating to Fraud — Fraud risk and data analytics. Check the current text.
Always confirm against the latest version of the source. Regulations evolve and amendments are common.
Related calculators
Duplicate payment test kit →Three-way match checker →Procure-to-pay audit workbook →
Share this tool
Last reviewed: 2026-10-17 · For informational purposes only — not professional advice.