Calculator

What does a code check on payment calls cost your firm?

Put in your own numbers. Nothing is sent anywhere, and you don't need to sign up.

The example figure is not a benchmark. Replace it with a real one from your own work.

Use your own recent count: changed bank details, payment instructions, requests to discuss a matter.

Sending the code and hearing it read back, on top of your existing callback. Time it yourself.

For the role taking the call. National medians plus super run about A$43 to A$59 an hour for clerks, secretaries, conveyancers and accountants, before overheads.

Founder plan
$29 a month inc GST, up to 150 checks and 9 users

Founding offer, limited to the first 100 businesses.

Staff time for 30 checks
$23 a month
Subscription plus your staff time
$52 a month, $618 a year
The payment you entered
$80,000

This shows costs side by side only. It calculates no avoided loss or savings, does not estimate how likely a redirection is, and a code check does not guarantee one is stopped. Setup, training and retries are not included. A correct read-back shows access to the number on file; it does not check the bank details themselves.

Context

Published figures, with their limits

Over A$55,000

average self-reported loss per confirmed business email compromise incident with a financial loss, reported to ReportCyber in 2023-24. Not specific to small firms or property settlements.

ASD Annual Cyber Threat Report 2023-24

Up to twice the excess

for firms insured under the LPLC 2026-27 solicitors' policy, where a payment follows an instruction the firm didn't take reasonable steps to verify. The base excess is on each firm's certificate and other policy terms apply.

LPLC 2026-27 solicitors' policy, clauses 5 and 5.5

We couldn't find a published average loss for property settlements specifically, so the calculator uses your figure, not ours. Client money lost, the firm's liability and any insurance excess are separate questions.

What the guidance says

Call back on a number you already trust

  • Check changes to payee details and phone the business on an independently sourced number. Scamwatch
  • Before transferring money, call a previously known number, have the BSB and account number read back, and keep a file note. LPLC, Call first to avoid cyber fraud (2023)

Vericode adds one step to that call: staff send a code to the number your firm already holds, the caller reads it back, and the result is recorded. A correct read-back shows access to that number. It doesn't prove identity or authority, or confirm who owns a bank account.

Start a free trial How it works

General information only, not financial, legal or insurance advice. Sources checked October 2026.