如何验证买方的银行信息变更？

Call the counterparty on a number you already held before the request, never one supplied in the message. Treat any mid-transaction change of bank details as suspect by default, and require confirmation from a second known contact.