Got a fake invoice email at work and my boss almost paid it, now I check every sender twice
Last Tuesday our office manager forwarded me an invoice from a vendor we use, except the email address was one letter off from the real one (it ended in .co instead of .com). My boss was about to approve the $4,200 payment when I noticed the bank details on the PDF didn't match what we had on file from last year. Now I call the vendor directly before any wire over $1,000, and I keep a printed list of our real account numbers by my desk. Does anyone else have a simple rule for spotting these before they get to the payment step?