Three-Way Matching: How It Prevents Overpayment and Fraud

Quick answer: Three-way matching is a control that compares three documents before an invoice is paid: the purchase order (what was ordered), the goods receipt (what was received), and the invoice (what is being billed). Payment proceeds only when all three agree.

Three-way matching is one of the simplest, most effective financial controls in procurement. It answers a single question before any money leaves the building: does what we are being billed for match what we ordered and what we actually received? When the answer is yes, the invoice clears; when it is no, the invoice waits. That small gate stops a surprising amount of leakage, error and outright fraud.

The three documents

Three-way matching compares three independent records that should tell the same story:

1. Purchase order — what you ordered and the agreed price.
2. Goods receipt — what was actually delivered.
3. Invoice — what the supplier is billing.

The power of the control comes from the fact that the three documents are created by different people at different times: procurement raises the PO, receiving records the goods, and the supplier issues the invoice. For a fraudulent or erroneous payment to slip through, all three would have to agree — which is far harder to engineer than faking one document.

Document	Created by	Answers
Purchase order	Buyer / procurement	What did we agree to buy, and at what price?
Goods receipt	Receiving / requester	What actually arrived?
Invoice	Supplier	What are we being asked to pay?

If quantities and prices agree across all three, the invoice is cleared for payment. If they do not, it is flagged for review rather than paid on trust.

How the check works in practice

Matching is a line-by-line comparison, not a glance at the totals. On each line the system compares quantity ordered against quantity received against quantity billed, and price agreed against price invoiced.

Scenario	PO	Receipt	Invoice	Outcome
Clean match	100 @ RM10	100 received	100 @ RM10	Auto-clear, pay
Short delivery	100 @ RM10	80 received	100 @ RM10	Hold — billed for 20 not received
Price creep	100 @ RM10	100 received	100 @ RM12	Hold — price above PO
Duplicate	100 @ RM10	100 received	second identical invoice	Hold — already matched

Matching tolerances

Rigid matching creates its own problem: trivial differences — a few sen of rounding, a delivery of 99 units against an order of 100 — would stall every payment. Mature teams set tolerances, small thresholds within which a variance is allowed to auto-clear. Set them well and staff only ever look at genuine discrepancies; set them too tight and you drown in exceptions, too loose and you let real overbilling through.

Two-way, three-way and four-way matching

Three-way is the common standard, but it sits on a spectrum.

Type	Documents compared	Use when
Two-way	PO + invoice	Services or items with no physical receipt
Three-way	PO + receipt + invoice	Physical goods — the default
Four-way	PO + receipt + invoice + inspection	Quality-critical goods needing formal inspection

The right level is a judgement about risk versus effort: add a document to the match only where the extra assurance is worth the extra step.

Why it matters

• Stops overpayment for goods that were never received.
• Catches pricing errors where an invoice quietly exceeds the agreed rate.
• Blocks duplicate invoices, a common and expensive accounts-payable error.
• Reduces fraud by requiring corroborating evidence from independent sources.
• Creates an audit trail that satisfies finance, external auditors and, in Malaysia, the documentation expectations that come with LHDN e-invoicing.

No match, no payment — the discipline behind "no PO, no pay." The control only works if purchase orders exist in the first place, which is why PO discipline and matching go hand in hand.

A worked example

A supplier delivers 90 boxes against a PO for 100, then invoices for the full 100 at the agreed price. To the eye, the invoice looks perfectly reasonable — the price is right and it references a real order. Two-way matching (PO versus invoice) would pass it. Three-way matching catches it instantly: the goods receipt shows 90, the invoice claims 100, and the ten-box gap is held for review before RM-worth of undelivered goods is paid for. The difference between the two approaches is exactly the difference between trusting the paperwork and verifying reality.

Common pitfalls — and how to avoid them

• No goods receipt recorded. If receiving does not log deliveries, there is nothing to match against. Make receipt capture part of the standard flow.
• Tolerances never tuned. Teams either set none (and drown) or set them once and forget. Review exception rates periodically.
• Matching only on totals. Header-level matching misses line-level games; always match line by line.
• Manual matching at scale. Beyond a modest volume, manual matching is slow and error-prone — this is one of the clearest wins for e-procurement automation.

Where three-way matching fits

Three-way matching is the payment checkpoint inside the procure-to-pay cycle, and it depends on disciplined purchase orders upstream. It is also a cornerstone control referenced in most procurement policies. Conceptually, it is the mechanism that lets the procure-to-pay pillar promise that money only ever follows verified delivery.

Further reading

• CIPS — Financial controls in procurement
• LHDN — Malaysia e-Invoice (MyInvois)
• Lapasar Mall — Procure-to-pay guide · Purchase order guide

Related guides

• Corporate Procurement: The Complete Guide for Malaysian Businesses
• Purchase Orders Explained: Types, Process, and Best Practices
• Procure-to-Pay (P2P): The End-to-End Process Explained
• Procurement Policy and Compliance in Malaysia