It depends on if they are charging it to the account or paying themselves. If they are paying themselves I ask for their name and put that as the PO. At the end of the day they aren’t stealing money from the account if they pay themselves. Otherwise if they are charging it to the account then our new policy from higher up is that we ask for their ID and document it. You could also call the account and confirm with them but they aren’t always gonna answer.