Back to the toolkit Print on A4 or US Letter. Use your browser’s print command; the site’s header and footer are left off.

Before you change any bank details

Stop. Call back.
Then pay.

Criminals send convincing emails asking us to change a supplier’s or employee’s bank details, or to make an urgent payment. Sometimes from a real, hacked mailbox.

  1. Stop.Any request to change bank details, or to make an urgent or unusual payment, is treated as suspicious until checked. Even if it comes from the boss.
  2. Look up the number yourself.Use a number you already had: from the contract, a previous invoice you have paid, or the organization’s official website. Never the number, link or reply address in the message.
  3. Call and ask.Speak to someone you know or can verify. Read back the new details and ask them to confirm. Do not ask “did you send this?” in a way that invites a yes.
  4. Second person approves.A second person checks the call was made and approves the change before it is entered.
  5. Write it down.Record who called whom, on which number, when, and who approved. Keep it with the payment record.