Odoo FraudGuard: Vendor Bank Security & Payment Lock
by DigiDev https://github.com/your-org/fraud-guardWe are celebrating our Odoo 18.0 release! Download and install FraudGuard this week to secure a lifetime free license on your database. Don't pay $49.00 USD later - stash this premium anti-fraud shield in your database today!
STOP PAYMENT FRAUD
Instantly freeze altered vendor bank accounts, block outgoing wire files (SEPA/ACH), and require secure multi-factor manager verification. Secure your cash flows with a single click.
>> verification_state = 'unverified'
>> payment_batch_status = BLOCKED
We've All Seen the Nightmare Scenario:
A supplier's email is intercepted. The hacker alters the bank IBAN routing number on an invoice PDF and sends it over. Your non-technical clerk opens the email, navigates to the Vendor card in Odoo, and silently copy-pastes the new bank account number.
At the end of the week, your accounting manager triggers a massive SEPA or ACH XML wire run. Odoo exports the files, the bank executes the wires, and boom - your $25,000 cash balance is sent to a hacker's account. By the time you realize what happened, it is already gone.
Why Standard Odoo Fails You:
By default, Odoo is designed to be highly passive. If a user modifies or deletes a sensitive bank account, Odoo accepts the change instantly. It posts a silent, grey text line in the Chatter feed that is easily ignored.
It does not lock the account. It does not block outgoing payments. It does not require validation. It leaves your corporate ledger completely vulnerable to simple social engineering.
How FraudGuard Seals the Breach
Four automated, unbreakable security gates that sit directly inside Odoo's Python ORM layer to lock down operations the millisecond bank details are touched.
Instant State Lock
Any new registration or modification of IBAN details automatically forces the account state into "Unverified."
SEPA / ACH Block
Odoo's payment processors are intercepted. Outgoing bank transfer batches targeting unverified accounts trigger an immediate system abort.
Automated Alerts
Dispatches a high-priority email notification to administrators containing full modified data and user audit details.
One-Click Approval
Click the secure UUID token link in the notification email to instantly verify and unlock the bank account right from your phone.
How It Operates (Under the Hood)
1. The Intercept
FraudGuard hooks directly into the core `create` and `write` methods of the `res.partner.bank` model. There is no backdoor. The second a number is registered, Odoo automatically quarantines the account, locks the record, and erases any active payment capability.
2. The Audit & Dispatch
The old account number and the new account details are logged securely into the chatter history as an immutable audit trail. A secure UUID verification link is generated, and a high-priority email alert is dispatched to the accounting managers.
3. Secure Verification
An authorized manager opens the email, verifies the details with the vendor via phone, and clicks "Verify & Unlock". The web controller verifies the single-use token, immediately wipes the token to prevent replay attacks, and unlocks the payment queue.
The Financial Matrix
Why upgrade? Let's contrast Odoo Enterprise requirements against our flat, one-time launch promotion.
| Security Dimension | Odoo Community (Default) | Odoo Enterprise Upgrade | FraudGuard (Promo) |
|---|---|---|---|
| Bank Change Intercept | Chatter Log only | Chatter Log only | Instant Auto-Lock |
| SEPA / ACH Payments Block | No Lock | No Lock | Absolute Hard Gate |
| Mobile Token Approvals | No | No | Secure One-Click Link |
| Operational Cost | Free (Vulnerable) | $240 - $480 / user / year | $0.00 USD (Lifetime Free) |
Integrator & Agency Approved
We build code specifically tailored for Odoo Integrators who maintain systems for dozens of clients. We hate bloated modules, complex setup screens, and broken JavaScript.
- 100% Pure Python ORM: Zero custom JS or OWL widgets. It will migrate across sub-versions without ever crashing.
- No External API dependencies: Zero monthly service fees, zero OAuth setups, and zero keys to configure.
- Odoo.sh Certified: Super-lightweight build that runs perfectly on Odoo.sh without memory spikes.
📋 System Compatibility
| Odoo Community: | 100% Compatible |
| Odoo Enterprise: | 100% Compatible |
| Odoo.sh cloud: | 100% Compatible |
| On-Premise / Self-Hosted: | 100% Compatible |
Secure Your Cash Flows Today
Don't leave your accounts payable process open to expensive social engineering hacks. Download and deploy FraudGuard while it is 100% free this week.
💬 We Value Your Feedback! Since we are offering this premium security upgrade for free during our launch week, please help support our team by leaving a 5-star review on the App Store!
| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
•
Discuss (mail)
• Invoicing (account) |
| Lines of code | 283 |
| Technical Name |
fraud_guard |
| License | OPL-1 |
| Website | https://github.com/your-org/fraud-guard |
Odoo Proprietary License v1.0 This software and associated files (the "Software") may only be used (executed, modified, executed after modifications) if you have purchased a valid license from the authors, typically via Odoo Apps, or if you have received a written agreement from the authors of the Software (see the COPYRIGHT file). You may develop Odoo modules that use the Software as a library (typically by depending on it, importing it and using its resources), but without copying any source code or material from the Software. You may distribute those modules under the license of your choice, provided that this license is compatible with the terms of the Odoo Proprietary License (For example: LGPL, MIT, or proprietary licenses similar to this one). It is forbidden to publish, distribute, sublicense, or sell copies of the Software or modified copies of the Software. The above copyright notice and this permission notice must be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Please log in to comment on this module
Happy 😊
Exactly the solution I hoped for a real unadressed security risk.
I just hope for a better documentation, I already asked for it their teams was extremely friendly and adresses all my requestÂ
There are no comments yet!