Reply to post:

In this particular scam it's the "financially authorised company officer" that is doing the transfer.

Unless you were proposing a method for the fraudsters to defend against a credential leak due to a Trojan PDF.