Rosa at the Mancini bakery almost processed a fraudulent payment. What stopped her?

Rosa did not spot the fraud from the email alone. The email was well-constructed and the invoice looked right. What stopped the payment was a prior decision the business had made: verify any change to payment details by phone before processing. That rule did not require Rosa to be an expert in crypto fraud. It just required her to make one call. The rule, not the individual, caught the fraud.