I remember fax phishing even before I had ever heard of email. From many large companies, simply paying a sub $100 invoice was standard procedure without even checking with the other internal bodies.
1. You get way less faxes than emails.
2. Faxes can't steal credentials.
3. You should be auditing expenses anyway.