An email that looked almost like our leadership asked for a same-day wire for a confidential deal. We verified out-of-band and stopped it. What dual-control habits do other teams use?
Urgent wire request that looked like our executive
3 thoughtful replies
Any payment change or urgent wire needs a second channel using known contact details — never from the email signature alone.
We run occasional tabletop drills with fake urgent requests. Staff get better at pausing.
Logging the near-miss date and spoof indicators offline helped our internal awareness session.