Verify wire instructions before sending money.
A changed account number or urgent email is not approval. Use an independent call and a documented sign-off before releasing a wire.
Pre-wire checkpoint
Pause on any changed instructions
Do not use bank details or phone numbers supplied only in an unexpected email. Flag changes to account, beneficiary, routing, or timing.
Call a known contact independently
Find the number in a prior verified record or official contact directory. Call the intended recipient directly; do not reply in the same email thread.
Read back the details
Confirm beneficiary name, destination bank, account details, amount, and purpose with the known contact. Record who verified and when; do not put full account numbers into an AI tool.
Use a second approval for changes
If details changed, have another authorized person compare the confirmed instructions against the payment record before release.
Stop if the story does not match
Escalate to your bank or internal fraud contact. Do not let urgency or an apparent executive email override the check.
A simple verification script
“I am calling the number we already have on file to confirm your wire instructions. Did you request a change? Please verify the intended recipient and destination details with me before we release payment.”
Never read back a full account number from a suspicious email as if it were already verified.
When a transfer has already been sent
Contact the sending bank immediately and request a recall or reversal. Then follow the first-hour response guide. Recovery is not guaranteed.
Email the payment-change checklist to your team.
No bank details or sensitive emails. You can read the checklist without submitting this form.
Want the workflow instead of another article?
Get the Business Email Compromise Defense Pack, request a free teardown, or download the checklist and capture the process for your team.