Your customer passed authentication. So why are they sending money to a scammer?