Someone tried this on a finance person at my company last year. Fortunately, the intended target figured out it was a scam after being asked to switch the conversation to WhatsApp, but the interaction went on for a surprising amount of time before that request was made.
its about security and internal controls.
Everyone hates bureaucracy, people get lazy with repetitive tasks, and humans always look for short-cuts in their daily tasks, but $25 million payment authorization in the hands of one person is simply wrong
A local car large dealership in our area was the victim of $4 million in theft, over about 10 years - perpetrated by their own accountant. She both seemingly approved invoices, and wrote and approved checks, which is a big NO-NO.
She was a very long-term, trusted employee, which obviously aided the fraud.
The family that owned the dealership divided up job functions among family members, which probably also contributed to the problem - everyone was in their own silo.
A new outside accounting auditor instituted a 2 week mandatory vacation period for department heads while their departments were being audited. That’s how her scheme was finally found-out.