What Is a Three-Way Match? (AP Control Explained Simply)

A three-way match is the accounts payable control that verifies three documents agree before an invoice is paid: the purchase order (what was ordered), the goods receipt (what was received), and the invoice (what is being charged). If the three match — quantities, prices, and terms — the invoice is approved for payment. If they don't, the invoice stops until the discrepancy is resolved.

It is the single most important control in the invoice approval process, and the reason it exists is simple: it is the only check that catches all three major payment errors at once — paying for things never ordered, paying for things never delivered, and paying the wrong amount.

The Three Documents

• The Purchase Order (PO): issued by the buyer before purchase — what was ordered, in what quantity, at what agreed price.
• The Goods Receipt: recorded by the warehouse or receiving team — what actually arrived, in what condition and quantity.
• The Invoice: issued by the vendor — what they are actually charging for.

Payment is only authorized when all three tell the same story. Any two of them agreeing isn't enough — the whole point is that each document is produced by a different party, so a discrepancy in one exposes an error in the chain.

A Worked Example

A construction company orders 200 steel brackets at $15 each — PO total: $3,000. The site receives 200 brackets and records the goods receipt. The vendor's invoice arrives for $3,450.

Without a match, the invoice looks plausible and gets paid — $450 lost. With a match, the $450 variance stops the payment immediately. The discrepancy gets investigated: the vendor billed at a higher rate than agreed. The invoice is corrected before money moves, not chased after it's gone.

What the Match Catches (and What It Doesn't)

Catches: unordered purchases, short or over deliveries, price variances, duplicate billing, and quantity errors — the everyday leaks that cost companies 1–2% of AP spend when unchecked.

Doesn't catch on its own: vendor bank detail fraud (the invoice can be perfectly matched and still pay a fraudster — which is why verified vendor master data is the complementary control), or quality problems on delivered goods.

Two-Way vs Three-Way Match

Companies with services or subscriptions (no physical goods) often use a two-way match: PO vs invoice only. That's appropriate when there's no delivery to verify. The three-way match applies wherever physical goods or defined deliverables exist. The rule: match to whatever proves the commitment was fulfilled.

How to Handle Match Exceptions

• Tolerances: small variances (e.g., under $10 or 2%) can auto-approve within policy — decide this deliberately, not by accident
• Hold, don't approve: an unmatched invoice goes to exception handling, never "approved with a note"
• Resolve before payment: the vendor conversation happens before money moves — after is collection work
• Log the exception: recurring variances from the same vendor signal a contract or process problem worth fixing upstream

Where the Match Breaks in Practice

The control fails the way most controls fail — not in design but in execution. Receipts never get recorded, so the match can't run. Matches are done manually against paper, so they're skipped when busy. Exceptions are approved verbally "just this once." And in email-driven processes, the match lives in someone's head — which means the auditor can't verify it happened at all.

A match that isn't recorded is a match that didn't happen, as far as an audit is concerned.

Frequently Asked Questions

What does 3-way match mean in accounts payable?

Verifying the purchase order, goods receipt, and invoice all agree before authorizing payment — the core AP control that prevents paying for unordered, undelivered, or mispriced purchases.

Is a 3-way match required by law?

Not a legal requirement in itself — but it's expected under internal control frameworks (and by auditors reviewing AP controls) for companies of meaningful size.

Can the three-way match be automated?

Yes — matching PO, receipt, and invoice data is exactly what approval workflow software does automatically, routing only the exceptions to humans.

Approvdit runs the three-way match inside the approval workflow — with PO references, receipts, and invoices attached to every request, and matched variances stopping the process automatically. Book a live demo to see the match running live.