Internal requests (email, voice note, DocuSign) from known senior leaders are hard to verify for authenticity because skepticism is lower and authority feels real, risking fraud or errors.