The Open Gate at Midnight
An email that looks exactly like the director asks to wire the grant — and only one rule stands in the way.
11:58 PM. An email glides in wearing the director's face.
Amir — urgent. Wire the grant to this new account tonight. Don't call, I'm in a meeting. — The Director
Amir's cursor hovered over 'Send.' Chaos loves that exact moment.
It really looks like her…
Of course it does. Chaos always wears a familiar face. There's one rule that beats it.
Masked Crewsader landed on the windowsill.
Verify any money movement by a second channel. Call a number you already have. Make it the rule for everyone — even the boss.
Amir called the director's real cell. She was asleep. She'd sent nothing.
No! Not the second channel! My one weakness!
The gate held. The grant stayed put.
MFA on the email, least access, kill old logins — and that one phone call. Small locks. They stop almost every break-in.
The lesson
The #1 real threat is a familiar-looking email asking you to move money. Verify by a second channel before you act — for everyone, including the boss.
Ready to reach your Pitch?
You don't need a full-time CTO to do this right. Island Pitch works as your Fractional CTO — senior technology leadership at a nonprofit's budget, helping you choose well, lock the doors, and sleep at night.
Get the whole field manual
Every concept in this story — and five more chapters — in one printable PDF.
The free guide is on its way.
Sign-ups open shortly. In the meantime, email us and we'll send it to you directly.