> What had happened was that someone had hacked in to the real estate agent email and had sent a fraudulent email, so she transferred the tens of thousands of p

> What had happened was that someone had hacked in to the real estate agent email and had sent a fraudulent email, so she transferred the tens of thousands of pounds to the wrong account. This was discovered a few days later. That's why I always "warm" bank accounts. I first do a little transfer, then confirm with the person, on the phone, that the money was received. If that's not possible (for example for fully automated system which expect the exact amount), I make 100% sure the account is correct. Invoice from my car dealership asking me to wire 3 K EUR? I call them and ask the secretary to read me loud the bank account number. Note that what you mention is a famous scam in the cryptocurrencies world: replacing Bitcoin deposit addresses (say a Bitcoin deposit address belonging to an exchange like Kraken or Coinbase) with the attacker's address. There are even malware who modify the clipboard when they detect that a Bitcoin address is in the clipboard. Even "better": there are malware that do this while making sure the last four digits are the same as those on the legit address (so people only checking the last four digits and thinking they're good are owned). It's very hard to not get scammed in this mediocre world full of shitty insecure, constantly owned, OSes, phones, websites, etc.: nothing that appears on these shitty devices can be trusted. The problem is so bad people are using 2FA devices and are still getting scammed.