No malware, no hacked password. Just a convincing email that reaches the one person whose job is to pay invoices.
How the scam plays out
Somewhere in your company's public paperwork, an attacker learned who your suppliers are, what their invoices look like, and who on your team approves payments. Then they wrote a good email. It arrives at your finance desk looking like your biggest supplier: new banking details, invoice waiting, payment requested today because the account is under review. The name is right, the letterhead is right, the tone is right. Payment goes out, and the money lands in an account nobody will ever get a subpoena served in. Nothing was hacked. Your antivirus caught nothing because there was nothing to catch.
The rules that stop it
The fix is process, and it's cheaper than any product. Banking details never change without a phone call to the number already on file, not the one printed in the email. Payments above an agreed amount need two people to approve them, and I mean two humans who each ask the question, not a checkbox. Then teach the team that urgency is the tell. A supplier whose account is "under review and must be paid by end of day" is describing a scam, because that is exactly what scammers say. A real supplier gives you a week and a phone number.
Then fix your own email
The other half is technical. SPF, DKIM and DMARC are DNS records that tell the internet which messages genuinely came from your domain. Without them, anyone can sign your name, and a supplier on the receiving end has no way to tell my email from a forgery. Olorun Cloud's Premium Business Email ships with these configured properly before your first message goes out, alongside real spam filtering and daily backups. It won't stop someone impersonating your supplier, no email system does; that's what the phone call is for. It stops them impersonating you.
If your finance team still takes payment instructions over email without a callback rule, write the rule this week. It costs nothing. If the email infrastructure underneath it needs work, talk to us.