Treat a request from a supplier or creditor requesting changes to contact information as suspicious. Contact them independently to confirm the request is genuine. Use contact details you have previously authenticated or that have been obtained independently, not those included in the request.
Don’t make any changes to contact or payment details until you’re certain it’s genuine, even if they’re claiming it’s urgent. Check and challenge any request to change account details.
Once you’ve made a payment, confirm with the intended beneficiary that it’s been received.