Business Email Compromise and the Call-Back Rule
Fake vendor invoices and payroll direct-deposit changes work because they look routine. A call-back rule and a few inbox alerts make them harder to pull off, and co-managed IT decides who watches for the warning signs.