I tend to phone people I'm making transfers to, where they've emailed or otherwise electronically sent the sort code and account number, to verify. Adds a couple of minutes, but could save tens of thousands.