Callback verification is a payment-control process that confirms a request through a separate, trusted contact path before any funds are sent or account details are changed. Instead of relying on the message that asked for the transfer, a staff member calls or messages a known-good number or uses an approved internal channel to check that the request is real.
This matters because many fraud campaigns depend on urgency and authority, not malware. Attackers may impersonate executives, lawyers, vendors, or deal partners and push a finance team to move quickly. A callback breaks that pressure cycle by forcing a second, independent confirmation. In practice, it is used for wire transfers, bank-detail updates, invoice changes, and other high-risk payment actions. Strong versions pair callback verification with dual approval, documented contact lists, and limits on ad hoc changes. If the callback does not match the request, the safest response is to stop the transaction and investigate.