On Monday, a scammer reached out directly to an HR my employer pretending to be me and said my banking information had changed. The HR rep did not notice that the email was not from my email address, didn't have my name in the email address, or that the email address was from an inbox . ru domain.
Today I went to check my account and my paycheck is missing. Come to find out this all went down earlier in the week and I was not asked once if that was me emailing to change my bank account info. Luckily I did some digging and found out that my identity hadn't been stolen but the scammer was using a metabank/pathward routing and account number, routing it to a moneylion account that didn't have any of my personal information tied to it (LUCKILY).
My paycheck was resent to me from my employer but obviously this absolutely never should have happened in the first place. My point of posting this here is to say don't trust your employer with shit because they can't be fucked to protect you from anything.