Anomaly detection in invoice payments