Wire Fraud Email Red Flags.
New bank details, lookalike domains, or an urgent change? Pause and confirm the instructions by calling a trusted number you already have—not one in the email.
A practical verification checklist for wires, ACH, and vendor changes. No bank details needed.
Prefer not to share your email? Read the free checklist now.
Run these steps before approval.
Look for changed instructions
Make the decision visible and documented before payment leaves the business.
Inspect domain spelling
Make the decision visible and documented before payment leaves the business.
Reject email-only verification
Make the decision visible and documented before payment leaves the business.
Call a trusted number
Make the decision visible and documented before payment leaves the business.
Hold funds if anything is inconsistent
Make the decision visible and documented before payment leaves the business.
Escalate immediately if any of these are true.
- Money has already moved to a new or suspicious account.
- A mailbox has unknown forwarding rules, filters, OAuth grants, or unusual logins.
- The request touches client funds, regulated data, payroll, trust accounts, taxes, or legal deadlines.
- Two internal approvers disagree or cannot verify the requester off-thread.
Keep moving through the cluster.
Get the free payment-change verification checklist.
We email the BEC payment-change checklist when delivery succeeds. The free wire checklist is also available above without an email.
Want the workflow instead of another article?
Get the Business Email Compromise Defense Pack, request a free teardown, or download the checklist and capture the process for your team.