A malicious third party intercepted email messages between a carpeting company and a customer, and was able to send a fake email asking for a deposit to the customer with all the right contact details, but the wrong bank account number <https://www.nzherald.co.nz/lifestyle/hacker-intercepts-carpet-companys-emails-retains-customers-5000-deposit/RHS33LPF6FAPLFSC65MV6OXXBI/>. And now the Disputes Tribunal has ruled that, since the email looked completely convincing, with the right personal details and everything, it was not reasonable to expect the customer to be suspicious or to want to double-check. And so the company had to wear the cost of the scam.