---
title: "Payment-redirection and deepfake call-back verification protocol for trust disbursements"
url: "https://ailawframework.com/precedents/trust-accounting-and-handling-client-money/payment-redirection-callback-protocol"
type: "precedent"
site: "AI Law Framework"
id: "a41-payment-redirection-callback-protocol"
area_id: "A41"
kind: "policy"
ai_level: "red"
version: 1
law_stated_as_at: "2026-10-17"
---

# Payment-redirection and deepfake call-back verification protocol for trust disbursements

> A firm protocol that stops trust money being paid to fraudsters: bank details collected securely, changes never accepted by email, phone or video alone, independent call-back to a known number, two-person checks before…

Canonical page: https://ailawframework.com/precedents/trust-accounting-and-handling-client-money/payment-redirection-callback-protocol  
Law stated as at: 2026-10-17

Site index for agents: https://ailawframework.com/llms.txt

A firm protocol that stops trust money being paid to fraudsters: bank details collected securely, changes never accepted by email, phone or video alone, independent call-back to a known number, two-person checks before each disbursement, deepfake red flags and what to do if money goes astray.

## Key facts

- Kind: Policy. A policy or procedure for a firm or client.
- Practice area: [Trust accounting & handling client money](https://ailawframework.com/precedents/trust-accounting-and-handling-client-money.md)
- Jurisdictions: Australia
- AI level: Red. Keep AI out of the decisive steps. A lawyer does the work.
- Law stated as at: 2026-10-17
- Status: Maintained. Checked on 2026-10-17 against the 6 authorities it cites, for Australia.

## When to use it

Use for every payment of trust money to a client or third party, especially settlements, estate distributions and damages payments. It applies equally to requests that appear to come from clients, other lawyers, agents and banks.

## How AI may be used

Lawyer-led. AI-enabled fraud (cloned voices, deepfake video, convincing fake emails) is the threat this protocol addresses. AI tools may help flag suspicious emails, but verification is done by people, by phone, using independently sourced numbers.

**AI may:**

- Flag inbound emails with lookalike domains, changed bank details or urgency cues for a person to review.
- Generate training scenarios and simulated phishing exercises approved by the risk partner.

**AI must not:**

- Must not verify identity or bank details, or confirm that a caller is genuine.
- Must not have access to banking or payment functions.
- Must not be relied on to detect deepfake voice or video.

**The lawyer checks:**

- Every change of bank details was verified by an independent call-back recorded on the call-back form.
- Two people checked the payee details against the verified record before release.
- Staff are trained at least yearly, including on deepfake voice and video scenarios.

## Authorities

- [Legal Profession Uniform Law s 138 (disburse trust money only in accordance with the person's direction)](https://legislation.nsw.gov.au/view/html/inforce/current/act-2014-16a)
- [Legal Profession Uniform Law s 148 (deficiency in trust account)](https://legislation.nsw.gov.au/view/html/inforce/current/act-2014-16a)
- [Legal Profession Uniform Law s 154 (reporting irregularities and suspected irregularities)](https://legislation.nsw.gov.au/view/html/inforce/current/act-2014-16a)
- [Legal Profession Uniform General Rules 2015 r 43 (method of payment; authorised signatories; payment particulars)](https://legislation.nsw.gov.au/view/html/inforce/current/sl-2015-0246)
- [Legal Profession Uniform Law Australian Solicitors' Conduct Rules 2015 r 4.1.3 (competence and diligence)](https://legislation.nsw.gov.au/view/html/inforce/current/sl-2015-0244)
- [Australian Signals Directorate, Protecting against business email compromise](https://www.cyber.gov.au/publication/protecting-against-business-email-compromise)

## Official form

[Official form](https://www.cyber.gov.au/publication/protecting-against-business-email-compromise)

## Full text and drafting notes

The full text and the drafting notes are not part of this public page. Signed-in firm accounts can read them at https://ailawframework.com/precedents/trust-accounting-and-handling-client-money/payment-redirection-callback-protocol and through the signed-in MCP connector https://ailawframework.com/mcp/firm.

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*