Hi Katie, yes this is becoming more common. We just need to keep vigilant by checking the real sender of the message. When changing bank details from employees, I request either a hard copy in person or an encrypted pdf with the password send via text message on the work phone. Prior to making the change I call the employee for a verbal conformation.