Start from the real request
Keep the supplier and payment context attached to the check.
Inspect the sender, route, domains, payment indicators and urgency signals without treating missing evidence as a pass.
The check ends with one next action. Missing evidence stays visible and never becomes proof that a payment is safe.
Paste the request or use original email headers.
Compare the visible sender with the technical route.
Keep changed or unfamiliar destinations visible.
Verify through a separate trusted channel.

Keep the supplier and payment context attached to the check.
Do not verify a request through new contact details contained in that same request.
The result supports the approver; it does not replace them.
Open the full result later from the company workspace instead of rebuilding the case from email.