3 ms·

Note that in this particular case the email in question had a signed document attached. So the scam could of been done with regular mail.The problem here was th

Note that in this particular case the email in question had a signed document attached. So the scam could of been done with regular mail.The problem here was the lack of verification, not the medium of communication. The ease of forging emails is more of an issue where the spear phish email is trying to disguise itself as coming from inside the company.

scott_s 8y ago
Which is why I said it's a process problem. But you definitely want email out of the process since it's not reliable.
- upofadown 8y ago
  OK, but what would you replace it with that was more reliable? If a company takes the time to, say, use GPG then email is probably the most reliable method available.
  - scott_s 8y ago
    A service where the payees have to sign in and change the payment information themselves.