The short answer

Pause the change and confirm it through a contact channel you already know is genuine. Do not use the new phone number supplied in the same message.

Open laptop, pens, and sticky notes on a wooden desk surrounded by houseplants.
Illustrative stock photo · Photo: RDNE Stock project / Pexels · Pexels License

Separate request from approval

Keep the request, independent verification and approved payment instructions in the restricted vendor record. Confirm the change before altering saved details or sending money. Record who verified it and when without copying full banking information into general notes.

The FTC advises contacting a known company through a trusted number or website, not suspicious-message details. [1]

An urgent invoice with familiar branding is still worth checking. If verification fails, leave the payment change unapproved and contact the vendor through the established route.

Sources

This article was generated by AI using the sources below. Editorial standards.

  1. How To Recognize and Avoid Phishing Scams — FTCSupports the attributed passage: The FTC advises contacting a known company through a trusted number or website, not suspicious-message details. The practical workflow and labeled examples are the publication’s own applications, not source-reported cases. Source checked Sep 8, 2026.

Have a correction? See our editorial policy and correction process.