A bank mandate is the set of instructions a company gives its bank that defines who is allowed to authorize payments, change account details, or approve other financial actions. It often lists authorized signers, approval limits, and any required checks for transfers and standing orders.
In cyber security, bank mandates matter because attackers target finance teams to hijack payment authority. If criminals steal email access, they may send fake change requests, push fraudulent bank details, or impersonate directors to trigger urgent transfers. Defenders reduce this risk with strong verification steps, least-privilege access, dual approval for payments, and careful monitoring of changes to payment instructions. Protecting bank mandates helps stop business email compromise and extortion attempts from turning access into direct financial loss.