An employee receives a message that appears to be from the finance director, requesting an urgent supplier bank-account change outside normal approval channels. What is the best immediate action?

1. Make the change and flag it for next month's audit
2. Verify through a known independent contact channel
3. Use the telephone number included in the message
4. Reply asking the sender to confirm urgency