A vendor just emailed us an invoice. Right logo. Right project. Right invoice number. New bank account. If we had paid it, $50K is gone. No recovery. No insurance. Just gone. We got an email a few days later that the vendors email had been hacked. This is happening to businesses every single day. And it's about to get much worse. AI is an incredible tool when it's used for good. But it is also a weapon. The same technology helping us underwrite deals and manage portfolios is helping criminals build perfect fraud at zero cost and infinite scale. The "Nigerian Prince" is dead. He's been replaced by AI that sits inside your vendor's email for months. It watches your payment cycles. It learns your controller's name. It waits for the perfect moment to swap banking info on a real invoice. It requires vigilance and good processes to not get fooled. Here are a few basic things we do: 1. Banking info changes = full stop. No exceptions. We stop and we call. 2. Never call the number on the new email. That's the hacker's number. We dig up the old contact info and call someone we already know. 3. Hold payment if there is a bank change. Every updated account gets a mandatory hold and a voice callback to the vendor. Two-minute phone call costs you nothing. One bad ACH is an expensive mistake. What else should we be doing?