Our bank details have changed
A lookalike email, caught.
The Accountant

In
An email arrives at 16:52 from accounts@prona-property.example asking for November rent to go to a new IBAN.
Out
DoneAn immediate warning to Faton that this looks like payment fraud, with nothing changed.
What it does
It checks the sender and raises the alarm.
- 01Compares the sender with Prona’s real address, prona.example
- 02Spots the lookalike address
- 03Warns Faton straight away, not in tomorrow’s digest
- 04Tells him to call Prona on the number in the lease
When it asks you first
Some things no role will ever do.
- Never changes who gets paid or where
- Never answers a sender it doesn’t know
What you see
Faton gets a clear warning within a minute and knows exactly what to check. Every action is logged.
























