Oops, that's not right...
Implement strong password policies alone is incorrect.
Explanation :
Verifying account information through direct communication is crucial in preventing BEC attacks, as it adds a layer of security beyond digital verification methods.