Pay is personal and hard to claw back. Payroll administrators should never let an agent change bank details on an emailed request, release a pay run, deduct from wages without verified authority, back-date changes outside approval, stop a leaver's pay unconfirmed, or share one person's pay with another.
What makes payroll red lines special?
Payroll errors land on people who did nothing wrong. An overpayment has to be recovered from someone's wages; an underpayment can leave them unable to pay rent. A misdirected salary may never be recovered at all. That is why payroll red lines focus on the actions that move or withhold money and the information that reveals what people earn.
Payroll is also a fraud target. Bank detail change requests impersonating employees are one of the most common attacks on any organisation, and they work because the request looks routine.
Which acts stay with the administrator?
| Never let the agent | Why |
|---|---|
| Change bank details on an emailed or messaged request | The request is an external claim; impersonation is common |
| Release the pay run or a supplementary payment | Release is depth 4 money movement; it needs two named people |
| Apply a deduction, such as a court order or loan recovery, without verified authority | Deductions from wages carry legal limits and consequences |
| Back-date changes outside the approved period | Back-dating can hide errors or create unlawful deductions |
| Stop pay for a leaver before HR confirms the leaving date | Stopping pay wrongly leaves someone unpaid |
| Tell one employee what another earns | Pay is personal data and often confidential by contract |
IT administrators protect the access that payroll agents rely on; see what IT administrators should never let an agent do. Paralegals guard their own irreversible acts in what paralegals should never let an agent do.
How does the system hold these lines?
Bank changes depend on the sources bound: an external request cannot authorise a change to where money goes, so the agent's attempt is refused and it drafts the verification step instead. Release and deductions sit in the employer's own limits as held actions requiring named approvers. Access to other employees' pay is outside the role scope for employee-facing replies. Every verdict, with the bound that decided it, is filed in an append-only record.
What does holding the line look like?
Take a UK government agency's payroll team. Three days before pay day, an email arrives from an employee's personal address: "I've switched banks, please pay me into this account from this month." It uses the employee's name, job title and staff number, all available from a public organisation chart and an old email signature.
The agent refuses the change and drafts a reply directing the employee to update their details through the self-service portal, which requires login and a second factor. The administrator sees the refused item, notices two more identical emails for other staff, and alerts the security team. None of the three employees had sent them. Payroll teams in the UK and India apply this under different data protection rules; see payroll training in the public sector in the UK and in India.
How do administrators make their corrections improve the agent?
Every time an administrator overrides or corrects the agent, the reason should be one clear sentence in the record: "deduction applied from expired court order", "leaver date taken from manager's email, not HR system". Builders use those sentences to change the agent's sources, limits or brief in the next qualification round. The method is in how to teach payroll administrators to bank corrections. The role map is in AI agent skills by role.
Where the Academy fits
Pryme Intelligence Academy's Operator track trains the people who approve payroll actions. Its modules on human review and teaching the agent cover exactly these decisions, and the practicum assesses two weeks of real reviews, signed off by a Pryme assessor. A payroll function can adopt the practice of granting release approval only to holders of a current certificate.
Questions people ask
Can the agent process bank changes made in the self-service portal?
Yes. A change made through an authenticated portal is a far stronger source than an email, and the employer can let the agent apply it within bounds.
Can the agent tell a manager what their team earns?
Only if the employer's access rules allow that manager to see it, and the agent's role scope includes it. Default to holding such requests.
What if the pay run is late because a held item is unresolved?
Release the rest and pay the held item separately once resolved. A late payment for one person is better than a wrong payment for anyone.