Hands-on practice · no signup
Practice: the email that changes where money goes
A supplier you genuinely work with emails to say their bank details have changed, and the invoice is due. This is the most expensive scam that reaches an ordinary inbox.
Free, and nothing here is real. No account, no download, and no message, payment, or account is ever actually touched.
Part of Spotting Fake Payment Requests. Free, plain-English practice for everyday work technology.
What you'll do
- Read a payment-change request that looks entirely legitimate.
- Notice what is normal about it, and the one thing that is not.
- Look up the number you already hold for that supplier rather than the one in the email.
- Call it yourself on a working keypad and verify.
- Put the change through the normal sign-off instead of acting alone.
What it teaches
Never change where a payment goes because an email told you to. Confirm on a number you already have, not the one in the message, then use your normal sign-off.
business email compromise (BEC)vendor payment-change fraudout-of-band verificationapproval and separation of dutiessocial-engineering pressure tactics
Want the full lesson?
The simulation is the practice. The lesson explains the why, in plain English, in about five minutes.