One Rule, Applied Every Time

The Spot, Stop, Secure framework, introduced in Crypto 101, applies directly here. Spot the signal: any change to a payment address, any message about an account problem, any urgent request from a platform or colleague. These are the moments that come just before almost every business payment fraud.

Stop before acting: do not process a payment based on an email or message alone, regardless of how genuine it looks. Crypto transactions are final. There is no recall once the payment leaves.

Secure the decision: call the person or company using a number already on file, not one supplied in the message. Confirm the instruction before any funds move. One rule covers all three fraud patterns: verify any new or changed payment instruction through a separate channel before acting on it. Write it into how your business handles payments. Make it the rule, not the exception.

If It Happens Anyway

Even careful people get scammed. These tricks are made by professionals, and they are built to fool smart people. Getting caught does not mean you did something stupid. If it happens to you, report it. Speak to your payment provider and your bank who will advise on how best to report it and how they can help. Then tell someone you trust. Scammers count on people feeling too embarrassed to speak up. Speaking up takes that power away.