How difficult is it for someone to get your bank account information from your company? If someone calls up stating that they want to wire money into your company’s bank account will your people give them all the information they need? Will they let them know which bank and branch your company uses? Will they give the routing and account number over the phone?
Or will they ask that the request be put into writing and faxed or e-mail to the company for verification? What controls over your information are in place to prevent fraud? Do you have enough internal controls in place?