Skip to content

Check a Vendor's Status Before Paying with Grok Web and X Search

Uses the Grok app (grok.com, the Grok mobile apps or Grok in X), not the xAI API: Grok searches the web and X live when you paste the prompt into a chat, and no API key is needed. The xAI docs linked below describe the same Web Search and X Search tools for developers on the API.

What the source describes

The FBI's Internet Crime Complaint Center (IC3) describes a business email compromise scheme in which a business with a longstanding supplier is asked, by email, phone or fax, to pay an invoice to an alternate, fraudulent account. It advises confirming requests to transfer funds and, when using phone verification, calling previously known numbers rather than numbers in the request. xAI's documentation says Grok's Web Search tool searches the web in real time and browses pages, and its X Search tool searches posts on X and answers with citations. Together they support a pre-payment check: research the vendor's recent public news, then verify any bank change by phone.

Result or outcome

According to the source, IC3 lists warning signs such as requests for secrecy or immediate action, unusual timing or wording, and incorrectly formatted invoices or letterheads, and says to contact the local FBI office quickly if a wire is recent, because the FBI working with FinCEN might be able to help return or freeze the funds.

How to run it

  1. Before paying a new vendor, or any vendor that has asked to change bank details, put the payment on hold and remove your own account numbers from the request email.
  2. Paste the prompt on this page into Grok with the vendor's name, website and the request text, so it searches the web and X for recent news.
  3. Read the cited articles and posts, and note any name change, breach or impersonation warning that applies to this request.
  4. Call the vendor on a phone number you already had on file, never one from the request, and confirm the change with someone you know there.
  5. Have a second person approve the bank change before the payment is released, and record who confirmed it and when.

Try it yourself

Copyable prompt

I am about to pay [vendor legal name], website [vendor domain], for [what they supply]. Search the web and X for news from the last [90] days about this company and report, with a link for each point: any announced name change, acquisition, new bank or payment processor, or closure; any reported outages, data breaches or email compromises; any posts or articles warning about scams that impersonate it; and its main phone number as listed on its own website. Do not give me any bank or payment details. Then list the warning signs in this payment request that match common business email compromise patterns: [paste the email text with our account numbers removed]. End with the questions I should ask when I call the vendor at a number I already have on file.

Replace the [bracketed] placeholders. Remove client names, account numbers, and personal data before pasting into any AI tool.

What to review

Grok can surface news and scam warnings, but it cannot confirm who controls a bank account, so the phone call to a known number is the real control. Never use contact details from the request itself, and if money has already gone to a suspicious account, contact your bank and the FBI at once.

Related free download: 50 AI Prompts for Bookkeepers (Prompt pack (PDF))

Source: FBI IC3 (public service announcement); also xAI Docs (Web Search tool); also xAI (Grok app: live web and X search); also xAI Docs (X Search tool); also FBI IC3 (business email compromise PSA, 2018)

Not professional advice. This is general information, not accounting, tax, legal or financial advice. Check AI output yourself and consult a licensed professional for your situation. See our Terms of Use.

This entry summarizes a public source. Features, plans, and availability change, so confirm details with the vendor. Tool names are trademarks of their respective owners.

  • Accounts Payable

    Flag Vendor Bank Change Emails with a Grok Email Automation

    xAI's announcement of Automations in Grok says an automation can run on an email trigger instead of a schedule. When an incoming email matches your filters on sender, recipient or subject, the automation fires with that email as context and Grok responds to the actual message, then saves the run to its history and reports back by email, app notification, both or neither. The FBI's IC3 recommends company policies that verify any change to existing invoices, bank deposit information and contact information, and contacting requestors by phone before complying with email requests for payments.

    Grok, Grok Automations

    xAI (Automations in Grok announcement)
  • Tax Research

    Fact-Check a Viral Tax Post on X Against Official Sources with Grok

    xAI's cookbook example builds a fact-checker with the Grok API. You paste a link to a post on X, and Grok reads it with X Search, images and video included, and splits it into up to four claims. It then checks each claim on the web and on X in its own request and writes a note in which every sentence cites a source the searches actually returned. Each claim gets a verdict of supported, missing context or not enough evidence, and any source Grok lists that the searches did not return is dropped, so a verdict stands only when a kept source backs it. The source-checking safeguards described here are part of the cookbook code, not the Grok app.

    Grok, X Search +1

    xAI Docs (fact-check cookbook)
  • Tax Research

    Track Official IRS Posts on X with Grok X Search

    xAI's developer documentation for the X Search tool says Grok can run keyword searches, semantic searches, user searches and thread fetches on X through the API, then answer with citations. A request can set allowed_x_handles to consider posts only from up to 20 named accounts, plus from_date and to_date, and those limits apply to every keyword and semantic search the model writes, whatever query it chooses. The IRS social media page lists its X accounts, including @IRSnews, @IRStaxpros and @IRSsmallbiz, and says its posts include tax-related announcements for individuals, businesses and tax professionals, plus the latest scam alerts.

    Grok, xAI API +1

    xAI Docs (X Search tool)
  • Practice Operations

    Research Accounting Software Before Switching with Grok DeepSearch

    xAI's Grok 3 launch post introduced DeepSearch as its first agent, built to synthesize key information, reason about conflicting facts and opinions, and distill clarity from complexity, including the latest real-time news. xAI says Grok 3 models were equipped with code interpreters and internet access so they can query for missing context and adjust their approach, and that DeepSearch ends with a concise, comprehensive report. This workflow applies that to a bookkeeping decision: a research brief comparing two apps on pricing, integrations, data export and recent complaints, with every claim tied to a link you can check.

    Grok, Grok DeepSearch

    xAI (Grok 3 launch post)

Bills and receipts from this AP workflow fit in the Small Business Bookkeeping Spreadsheet Bundle, available on our sister store.