Glossary

Controls

What is immutable ledger?

An immutable ledger is a digital record that, once an entry is written, cannot be edited or deleted, so the history of what was recorded and when stays provably intact.

Also called tamper-proof ledger · append-only ledger · blockchain ledger

Entries are added in sequence and sealed with a cryptographic fingerprint that is tied to the entry before it. Changing any past record breaks that chain, which makes tampering detectable rather than merely forbidden. Each entry also carries a timestamp, so the record shows not only what happened but the order it happened in.

Most implementations run on blockchain or a similar shared database, where copies held by multiple participants make a silent edit impractical: rewriting history would mean rewriting every copy at once. Business deployments are usually permissioned, meaning known parties write to the ledger rather than the open public.

In a payment fraud context the value is evidential. A vendor master file can be edited, and a fraudulent bank change can quietly erase its own history. A verification record written to an immutable ledger preserves which bank details were checked, when, and against what, so a changed account cannot present itself as if it had always been the account on file.

Immutability protects the record, not the payment. It guarantees that an entry was not altered after the fact; whether an entry is accurate depends on the verification performed before it was written. That is why an immutable ledger works alongside account validation and callback verification rather than replacing them.

Common questions

Blockchain is one way to build one. An immutable ledger can also be a single append-only database secured with hash chaining. Blockchain adds distribution, holding copies across multiple parties so no single participant can rewrite the record.

Yes, by appending a new correcting entry. The original entry is never removed, so the complete history, including the mistake and its correction, stays visible.

It preserves the evidence of which bank details were verified, when, and by whom. When a fraudster submits changed account details, the ledger shows the verified record, so the change cannot masquerade as long standing information.

No. It guarantees entries cannot be changed after they are written. Whether an entry is true depends on the verification performed before it was recorded.

Sources and further reading

Citing this entry? Cite as Coffr, LLC and link to https://getcoffr.com/glossary/immutable-ledger.

Read the longer research behind this in Blog, or browse the full glossary.

Disclosures

  1. Coffr, LLC carries insurance for its own benefit. That insurance does not cover you, your payments or your funds, and Coffr does not guarantee any payment. Coffr does not hold or transmit customer funds. See the Terms of Service.
  2. "Verified" means the identity, business and bank account checks shown passed on the date shown. A verification confirms who you're paying at that time. It doesn't guarantee that a payment will reach the intended recipient.
  3. Coffr records a cryptographic fingerprint of each verification on a public ledger run by independent organizations. Fingerprints contain no names, bank account numbers or tax IDs, and they can't be changed or deleted.
  4. Sources: ACH volume, Nacha 2025 ACH Network volume; online crime losses, FBI IC3 2025 Internet Crime Report.