Stop the transaction for verification
A message that appears to come from a known vendor or executive may still be impersonation. A changed bank account, urgent wire request, or instruction to bypass the normal approval process deserves a second check.
Verify independently
- Call the vendor using a number already in your approved records, not one in the message.
- Follow your company's dual-approval process for payment changes.
- Report the message to Softfusion security with the sender address, time, and requested change.
- Do not send bank details or client data in an email reply while verification is pending.
If payment already went out
Contact your financial institution immediately through its known number and notify your internal finance and security teams. Time matters when recalling a transfer. FTC guidance on business impersonation describes this pattern.