The payee change that never entered the cooling-off queue
How an account-number amendment on a second device can pass every later transfer approval and still be a control failure.
Transfer approval judges the instruction in front of it: amount, limit, and a familiar payee name. It rarely asks whether that name still points at the account number enrolled last month.
In our payee-integrity reviews we look for shared account numbers, near-duplicate nicknames, and beneficiary changes that never entered the cooling-off or dual-control queue. Those changes sit upstream of the transfer you are proud of.
If a payee amendment can be completed on a newly bound device by the same login that later releases funds, the later maker-checker trail is decorating a decision that already happened.