It doesn’t take much. I once put my name, job title and employer on LinkedIn. That was enough for someone to email my payroll officer and convince them to change my paycheck to a different bank account. I had no idea until my pay was missed.
My payroll officer was a dumbfuck, but that’s all it took.
i could add more detail, but it just raises further questions.
The payroll officer was emailed from an aol.com address, not the company email domain.
The bank account was changed to a branch in another state, several thousand kilometres away.
My office was physically next to the payroll officer. Despite sitting 2 metres away, I was not contacted in-person at any stage.
At least two staff members oversaw this.
They just wrote off the money and paid me for the month again.
This triggered a policy change. Bank account updates had to be confirmed in-person after that.