All templates

Flag Duplicate & Unusual Expenses

Every morning, WebRun opens Ramp, scans yesterday's transactions for duplicate amounts, unexpected vendors, or charges outside your normal patterns, logs the suspects to a review sheet, and pings you in Slack so you can approve or query them.

Runs on WebRun · Strict Lockdown policy
Every day at 8:00 AM WebRunorchestrates each step
1 Ramp scan recent transactions
2 Google Sheets log suspects for review
3 Slack alert you to anomalies
In short

How can I automatically flag duplicate and unusual expenses before they hit the books?

Every morning, WebRun opens Ramp, scans yesterday's transactions for duplicate amounts, unexpected vendors, and charges outside your normal spending patterns, logs the suspects to a Google Sheets review sheet, and pings you in Slack so you can approve or query them before they hit the books.

  • Duplicate and out-of-pattern charges caught before posting
  • No more manual transaction scanning
  • Every suspect flagged for human review before approval

Built for finance managers · controllers · operations managers · startup CFOs

Step by step

What does WebRun do on every run?

The exact actions WebRun takes, in order - in plain language, so you can adjust anything.

  1. WebRun signs in and gets to work

    Opens ramp.com in a real browser with your saved login - no setup, no API keys.

  2. 1
    Ramp - scan recent transactions
    ramp.com
    WebRun in Ramp: scan recent transactions
    WebRun opens Ramp to scan recent transactions.
    • Open Ramp and filter transactions to yesterday's date range
    • Check for duplicate amounts to the same vendor within 48 hours
    • Flag any transaction from a vendor not seen in the last 90 days
    • Flag any single charge more than 2× the vendor's historical average

    Done when All suspect transactions are identified with a reason code.

  3. 2
    Google Sheets - log suspects for review
    google.com
    WebRun in Google Sheets: log suspects for review
    WebRun opens Google Sheets to log suspects for review.
    • Open the Expense Review sheet
    • Add a row for each flagged transaction: date, vendor, amount, card holder, reason flagged
    • Leave an Approved / Queried column blank for you to fill in

    Done when Every suspect charge is logged in the sheet awaiting your decision.

  4. 3
    Slack - alert you to anomalies
    slack.com
    WebRun in Slack: alert you to anomalies
    WebRun opens Slack to alert you to anomalies.
    • Post a count of flagged charges and the total dollar value at risk
    • Link to the review sheet so you can act with one click

    Done when You have been alerted with the count of suspects and a link to review them.

Run settings

How is each run configured?

Starting pageWhere Chrome opens at the start of each run
ramp.com
ScheduleRuns automatically on this cadence
Every day at 8:00 AM
DeliveryHow each run's result reaches you
Expense flags · Slack
OutputWhat each run produces - A list of duplicate or anomalous transactions with reason codes, ready for your approval or dispute.
Text
Setup & safety

Secure by default

Connect once, stays signed in

WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.

Your credentials stay in your own private environment - WebRun never stores your passwords.
Strict Lockdown

Every action is checked against this policy before it runs.

Domains ALLOWLIST
Typed input ALLOW
Shell command BLOCK
File uploads BLOCK
Runs in a contained environment More on policies
Good to know

Questions, answered

Will it dispute or reverse a charge automatically?

No. WebRun only flags and reports. Every decision to dispute, approve, or query a charge is yours to make.

How does it decide something is unusual?

It checks for exact duplicate amounts to the same vendor, first-time vendors, and charges more than twice the vendor's recent average. You can tune these thresholds.

What if everything looks normal?

It posts a clean bill-of-health message to Slack so you know it ran - silence means it found nothing suspicious.

Put this on autopilot.

Turn it on in minutes - or have our team set it up for you.