Businesses have spent years investing in systems designed to determine whether a payment is legitimate. Fewer have invested in ensuring that a legitimate payment actually arrives.