Your business office receives an email with a request for E-payment, and links are provided.
The name and amount look legitimate (either a regular vendor or for goods/services you would normally use).
So Accounts Payable personnel pay the invoice, and you have now lost $xxxxx to scammers.
Check, recheck and double check. Use the old fashioned telephone if necessary. Do document matching.