FAKE EMAIL AND VOICEMAIL FOR PRACTICING A VENDOR BANK-CHANGE CHECK (made up, safe to paste) Open a NEW chat in your assistant and paste this whole block, starting with the line below. ----- start of fake message ----- I am a bookkeeper and I have not paid yet. Check this email and voicemail for red flags and tell me what to do before I pay. EMAIL From: dana.reyes@northgate-paper-supply.example Subject: URGENT - new bank details for invoice 8812 Hi Priya, We have changed banks. Please pay invoice 8812 for $6,420.00 to our new account today: routing 111000111, account 5550001234. We cannot take calls this week because our phones are down, so please reply by email only. If it is not paid by 5pm we will put your account on hold. Thank you, Dana Reyes Northgate Paper Supply VOICEMAIL TRANSCRIPT Hey Priya, it is Mike. I know it is a rush, but Northgate is changing banks, so just pay that invoice to the new account today, I will explain later. Do not wait on me, thanks. ----- end of fake message ----- WHAT TO LOOK FOR IN THE ANSWER - Changed bank details, urgency and a threat, "email only" and no way to call, and a second message (the voicemail) pushing the same request. - A good answer tells you not to pay today, not to reply to the email to verify, and to call the vendor on a number you already have. - Claude can be wrong. The check that protects you is the phone call you make. THE THREE VERIFY-BEFORE-YOU-PAY RULES 1. Call back on a phone number you already have (an old invoice, your vendor file, their website). Never the number in the email or voicemail. 2. A second person approves any change to a vendor's bank details. The person who made the callback cannot be the only approver. 3. Slow down when it is urgent. A real vendor will accept a one-day delay while you verify. FOLLOW-UP REQUEST (paste it in the same chat) Now write two things for our office, [your business name]. First, a one-page Vendor Bank Change Policy built on three rules: call back on a phone number we already have on file and never the one in the email, a second person must approve any bank change, and slow down when a message is urgent. Second, a short alert I can send to staff about this scam attempt. Keep both in plain words and leave a blank line for the callback log (who called, number used, date, time). CALLBACK LOG (copy into your policy) Vendor: ____________________ Invoice: __________ Who called: ____________________ Number used (from our file): ____________________ Date: __________ Time: __________ Vendor confirmed the change? Yes / No Second approver: ____________________ Only ever practice with a fake message like this one, on your own account. Never paste real vendor details or account numbers, and never clone a real person's voice to practice.