Verify a payment or bank-detail change before you pay

Most payment-redirection losses come down to one missed phone call. Build verification into the routine, not the exception.

1. Treat every request to change bank details or pay a new account as high-risk by default.
2. Always confirm by phone using a number you already hold — never the contact details in the request.
3. Be wary of urgency, secrecy or a sudden change of the usual process — all classic BEC signs.
4. Require a second person to approve any bank-detail change or large payment.
5. Don’t rely on email alone to confirm anything financial; a hacked inbox will happily ’confirm’ itself.
6. If anything feels off, pause the payment — a held payment is recoverable, a sent one often isn’t.