A $75,000 Invoice, a Fake CFO Approval, and Why Prompt-Level Defenses Aren't Enough