Security Alert: Phishing Attacks Targeting Direct Deposit in UCPath. Learn more by reading UCNet's article: "Online attackers are actively targeting UC staff: Here’s what you need to know to protect yourself."
Yes, the receiving department should initiate the transfer.