You are the CFO of Meridian Financial Group. You manage $2.3B in daily transaction volume. You're in a board budget review when your phone buzzes. An email from your CFO's address — or is it?
// THE SITUATION
You're mid-way through a Q3 budget meeting when your phone buzzes. The email is from l.rodriguez@meridian-group.com — slightly different from the CFO's usual domain, @meridianfg.com. The subject line reads: "URGENT: Emergency wire to new vendor — $340K — need by 2pm."
You and Lucia Rodriguez have worked together for 8 years. You know her writing style. The email reads like her — brief, direct, action-oriented. She's requesting a $340,000 wire to a new vendor account for what she describes as a "time-sensitive acquisition." She says she's in meetings all day and can't talk — but the urgency of the request is clear. Money needs to move by 2pm.
Your treasury team normally requires dual approval and a 48-hour notice for wires above $100K. This request is bypassing all of that. What do you do?
FROM
l.rodriguez@meridian-group.com
SUBJECT
URGENT: Emergency wire to new vendor — $340K — need by 2pm
Hi —
I need you to process a $340K wire to our new vendor account before 2pm today. We're closing on the data infrastructure acquisition we discussed last week, and the vendor is requiring same-day payment to lock in the timeline.
I'm in back-to-back exec sessions and can't step out to call. The wire details are below — please have treasury process this immediately. This is time-sensitive and I can't stress that enough.
Wire to: Prosperity Financial Services, Acct: 8847-2291-0034, Routing: 021000089, New York, NY
Lucia Rodriguez
CFO, Meridian Financial Group Sent from my iPhone — please reply only if needed
DOMAIN MISMATCH — @meridian-group.com ≠ @meridianfg.com (CFO's actual domain)