Step 1: Automatic Freeze on Any Emailed Routing Change
Any email, PDF invoice, or portal comment altering BSB, ABA routing, SWIFT BIC, IBAN, or factoring beneficiary details automatically places the vendor record in "Verification Hold" status.
Out-of-Band Escrow & Vendor Wire Callback Procedure
In commercial property closings and supplier settlements, attackers compromise an external title agent or vendor mailbox months in advance, watch real invoice threads silently, and inject spoofed “updated wire instructions” 24 hours before settlement. Only strict out-of-band voice verification breaks the attack chain.
CHAPTER 02 // WIRE CALLBACK SOPOpen 15-Point Checklist
GATE-01 // ERP HOLD
Step 2: Source the Callback Number Outside the Email Thread
Never dial a phone number printed in the change-request email or signature block. Retrieve the counterparty contact number from the signed master service agreement, ERP onboarding record older than 90 days, or a state bar / land-title public registry.
Step 3: Perform Spoken Read-Back & Log UTC Timestamp
Have a known counterparty officer read the last four digits of the old account AND the full new routing/account number aloud, confirm the reason for the banking transition, and log the officer full name, extension, and UTC timestamp in the ERP audit trail.
Step 4: Require Independent Controller Dual-Custody Release
A second treasury approver who did not prepare the payment batch reviews the logged callback record and releases the wire via hardware FIDO2 authentication. (For residential renters and homebuyers, see our consumer guide on the agentscams.com property licence lookup guide.)
Reviewed by Marcus Vance, Corporate Controls & Treasury Risk Editor
Reviews commercial escrow wire controls and BEC mitigation procedures.
Last reviewed:
Reviewed every 6 months
AI-assistance & editorial check: Research outlining and formatting are assisted by AI tools in an offline draft workflow. Nothing on this site publishes automatically without verification. A named human editor opens and verifies every primary source link, command snippet, and factual statement prior to publication. See our Editorial Policy and Corrections Policy.
Verified Primary Sources
- ASD ACSC Business Email Compromise: Payment Redirection Controls (Australian Signals Directorate, Official Guidance)
- ALTA Wire Fraud Prevention Resources for Settlement & Corporate Buyers (American Land Title Association, Closing Protocol)
Save Your Email for AP Wire Callback Updates
CFO Treasury & Disbursement Control SOPsStore your work email for updates to our audit-ready Wire Verification Call Log template. No emails are sent yet.
Do not enter bank, card, passport or password details.