Process & tools

Three-way matching: checking the purchase order, the goods receipt and the invoice before you pay

Process & tools · · Published 2026-11-03

Before an organisation pays a supplier, someone should be able to answer three questions: did we order this, did we receive it, and is the supplier asking for the price we agreed? Three-way matching answers all three by comparing the purchase order, the goods receipt and the invoice. It is one of the oldest controls in purchasing, and one of the most common reasons suppliers get paid late. This guide explains how it works, where it breaks, and how buyers can make it a control rather than a bottleneck.

The three documents

Matching sits near the end of the purchase-to-pay cycle described in our guide to the procurement process. Each document comes from a different party, which is exactly what makes the comparison useful:

Because the requester, the receiver and the supplier each produce one piece of the evidence, no single person can create and approve a payment on their own. That separation of duties is the real purpose of the match; catching honest errors is a welcome side effect.

What gets compared

CheckCompared betweenWhat a mismatch usually means
Supplier and PO referencePO and invoiceInvoice sent without a PO number, or to the wrong entity
Item or service lineAll threeSubstitute product, or a line description that differs from the catalogue
QuantityReceipt and invoice (and PO)Partial delivery invoiced in full, over-delivery, or receipt not yet booked
Unit pricePO and invoicePrice increase not agreed, or a price change agreed but not updated on the PO
Terms, freight, taxesPO, contract and invoiceDelivery charges added, different payment terms, wrong tax treatment

A two-way match compares only the PO and the invoice. It is common for services, subscriptions and low-value items where there is no physical delivery to book. A four-way match adds a fourth document, usually an inspection or acceptance record, for goods that must pass quality control before they count as received.

What a public-sector rulebook requires

Private companies set their own matching rules, but public bodies often have them written down, and those rules are a useful benchmark. In the United States, the federal Prompt Payment regulations (5 CFR Part 1315) list what a "proper invoice" must contain: the vendor's name, the invoice date, the contract number or other authorisation, an invoice number, a description, price and quantity of the goods or services, shipping and payment terms, and contact details, among other items. They separately list what a receiving report must show, including quantities received, delivery dates and acceptance dates, and the receiving official's signature or an electronic equivalent.

The same regulation shows the other side of the control. An agency that finds an invoice improper must return it no later than seven days after receipt, identifying every defect that prevents payment. And where an agency uses a fast-payment procedure that pays before receipt is verified, it must still ensure that receiving reports and payment documents are matched afterwards and discrepancies corrected. In other words: matching is mandatory, but so is telling the supplier quickly and completely what is wrong.

Tolerances: how exact is exact?

Insisting on a perfect match for every line creates huge exception queues over rounding differences and small freight variations. Most finance systems therefore let buyers set tolerances, as a percentage, an absolute amount or both, beyond which an invoice is blocked. There is no universal correct value; it is a policy decision that should reflect risk:

Why invoices get stuck

In practice, most blocked invoices are not attempted fraud. They are process gaps on the buyer's side as often as the supplier's:

  1. Receipt not booked. The goods are on the shelf but nobody recorded them, so the invoice waits for a receipt that will never come unless someone chases it.
  2. PO raised after the invoice. A "retrospective" PO matches on paper but defeats the purpose of the control, and it is a sign that buying is happening outside the process.
  3. Price changed in the contract, not on the PO. A price review agreed under the contract must reach the open orders too. Our guide to contract management after signature covers how changes should be recorded.
  4. Missing or wrong PO number on the invoice. Suppliers should be told, in the order itself, that invoices without a valid PO reference will be returned.
  5. Partial deliveries. A supplier invoices the full order while only part has arrived; the system should match line by line against what was actually received.

Each exception needs an owner and a deadline. An invoice that sits in a queue for weeks can push the buyer past the payment terms it agreed, and in several jurisdictions late payment triggers statutory interest. Our guide to supplier payment terms explains the legal limits and why a payment term only works if the buyer's own process can meet it.

Alternatives that keep the control

Matching every invoice line by hand does not scale. Organisations reduce the workload without dropping the control in a few ways:

A short checklist

Done well, three-way matching protects the organisation's money without punishing its suppliers. Done badly, it becomes the reason good suppliers price in late payment.