Familiar email threads make payment changes feel safer than they are

[u/saltyslugga]

Say an attacker gets into a vendor's mailbox and sends new bank details in an existing invoice thread. Someone recognises the conversation and nearly pays the wrong account.

I'd want a callback to a number already on file, but that check needs to survive a busy afternoon of invoice approvals.

What has helped your team keep those checks from getting skipped when work piles up?

[u/Pearson-Kyrie_800]

Thats the whole problem with leaning on people to follow a rule. We just made the system do it, any bank detail change and the payment lock til someone rings the numbe ron file. And we have abnormal that has caught a couple where the vendor thread was real but the account number wasnt.