09/04/2026
One rule that would prevent most wire fraud at a club: no payment detail ever changes based on an email.
If a vendor writes in to say their bank information has been updated, someone calls the number already on file for that vendor and confirms it by voice. Not the number in the email signature. In the case we describe in our article, attackers had already edited that signature to their own line, so the club's "verification" call went straight to the scammer.
Two more that pair well with it:
- Dual approval for any unusual or urgent payment request
- Two-factor authentication on every staff email account
We put this together with four other scams that reach club staff, including the phone and text versions most teams haven't been trained on: https://clubsupportinc.com/blog/top-5-social-engineering-scams-targeting-club-staff-and-how-you-can-stop-them/