[miohtama]

Much easier is to have banks to call the client and verify an abnormally large transaction by phone.

[TylerE]

No it isn’t, a “bank” calling to verify a transaction is a major vector for these sort of attacks.