What's the single highest-ROI control against deepfake executive fraud?

“Mandatory callback verification to a pre-registered number for any transfer above threshold. It's procedural, low-cost, and defeats even perfect deepfakes because the attacker doesn't control the callback channel.”