I tend to phone people I'm making transfers to, where they've emailed or otherwise electronically sent the sort code and account number, to verify. Adds a couple of minutes, but could save tens of thousands.

This is possible because the telephone network is (more) secured, in the same way email and other forms could be, but aren’t.