Confirm payment changes before you pay
Business email compromise targets invoices in both directions. Any change to bank or payment details gets a phone call to a known number before money moves. Make it a firm rule with no exceptions, even when the request looks routine.
