Securing payment processes: four rules that hold in an emergency

First: every change of bank details is verified via an independently stored telephone number – never via contact details from the triggering message, regardless of the amount. Second: the four-eyes principle applies without an urgency exception; anyone who asserts urgency cannot set it aside.

Third: payments outside the usual pattern – a new recipient country, a first-time recipient, an unusual amount – trigger an additional approval. Fourth: there is a clearly designated reporting channel for suspected cases that can be used without pressure to justify oneself. The last point appears soft, but frequently decides the remaining reaction time.