Business email compromise
BEC · Fraud in which the e-mail of a manager, employee or supplier is spoofed or taken over to request a fake payment or information.
- 01
Why it matters
This fraud may contain no malware or links at all, just a convincing e-mail and a sense of urgency. That is why it reaches staff without tripping technical filters and can cause a big loss with a single payment. Confirming payments and bank detail changes through a second channel is the most effective measure.
- 02
Example
A regular supplier's hijacked e-mail account sends a message saying “our bank account has changed”. Before paying, accounts calls the supplier on the known phone number and learns that nothing has changed.
- 03
Common mistake
Verifying by calling the phone number given in the e-mail. That number can be fake too; the call should go to a number already on record.
- 04
Let's talk about your project.
Tell us what you need; we will define the scope together.