I would consider the same. We can use email for some requests, but basically came up with a process that was only offline or required some sort of manual approval.
I know it seems like we are going backwards, but we get hit once or twice a day with +300 employees on some sort of scam.