# Payment call checklist: 3 steps before money moves
From Hourwiz: https://hourwiz.com/v/deepfake-25m-call
Print it. Pin it next to whoever approves payments.

[ ] 1. HANG UP AND CALL BACK on a number you already have.
       Never use a number, link or meeting invite from the message that asked for the money.

[ ] 2. ASK FOR THE CODE WORD.
       Agree a secret word or phrase with the people who can ask for payments.
       (The FBI suggests a secret word for families. Using one at work is our adaptation.)

[ ] 3. TWO PEOPLE APPROVE any unusual payment.
       No single call, message or person can move the money alone.

OUR RULE: secret + urgent + money = STOP. Then run steps 1 to 3.

Sources:
- FBI IC3 PSA I-120324-PSA (Dec 2024): https://www.ic3.gov/PSA/2024/PSA241203
- FBI IC3 PSA I-091124-PSA (Sep 2024): https://www.ic3.gov/PSA/2024/PSA240911
- Swiss National Cyber Security Centre, dual control: https://www.bacs.admin.ch/en/w23-en
This is a workflow, not professional security or legal advice.