I remember fax phishing even before I had ever heard of email. From many large companies, simply paying a sub $100 invoice was standard procedure without even checking with the other internal bodies.

This is true, but it's much less of a concern because:

1. You get way less faxes than emails.

2. Faxes can't steal credentials.

3. You should be auditing expenses anyway.