

Well, you just call to confirm. Like, yes, that address is fine, but any financial changes out to have a human confirmation process. A simple: did you…? Yes/no?
If they start spoofing, what’s the protocol?
Emails are nice because the messages often tack on routing, which is traceable so I hope you have a good IT team willing to filter.



And money launder.