out-of-band verification

Also written: call-back rule, second channel, verify out of band

Checking a request through a separate channel you already trust, such as calling a number already on file rather than one in the email. It defeats BEC and deepfakes.