Verifies unusual requests through a second channel

Confirms payment changes, credential requests, and odd asks by calling or messaging the person through a known, separate channel.

Authority and familiar-sender cues raise clicks, and AI now writes convincing personalized messages. Out-of-band checks hold up even when the message itself looks perfect.

How to observe it: Share of payment-change or gift-card Simulations that end in a verification call or report instead of a reply.

Supporting evidence

• Evaluating Large Language Models' Capability to Launch Fully Automated Spear Phishing Campaigns: Validated on Human Subjects Heiding et al., 2024
• Exploring susceptibility to phishing in the workplace Williams et al., 2018

Context

• How Experts Detect Phishing Scam Emails Wash, 2020