Everyone keep an eye on inbound spam and their processes, we got stung.
Double check your bank 2fa and dual authorization processes.