A quick phone call confirms it's really them

Before a recipient's very first file unlocks, they confirm a quick verification call placed to a phone number your company already vouched for — a channel separate from email, which an attacker sitting in a compromised mailbox has no way to intercept. It's a one-time check per recipient: once verified, every file after that arrives instantly, with no repeated calls.