Alert on forwarders' changed

Hi As a root level user, is there a way to set up an alert whenever any domains forwarders are changed. The reason I ask for this is that some hackers are setting forwarders on users' account, watching their emails and then asking their clients to pay to the hackers' accounts instead of the clients.