Business Email Compromise (BEC)

What is Business Email Compromise (BEC)?

BEC is a form of cybercrime where attackers manipulate trusted communication channels to authorize fraudulent payments, transfer sensitive information, or gain system access. In vendor ecosystems, compromised supplier accounts can trigger large-scale financial losses or unauthorized data exposure. Detection requires email security controls, identity protections, and verification steps for financial requests.

FAQs

How does BEC affect third-party relationships?

A compromised vendor account can spread fraudulent invoices or phishing attempts to all connected customers.

Is BEC preventable through technical controls alone?

No. It requires a combination of security controls, process controls, and employee verification practices.

What signals indicate a possible BEC attempt?

Unexpected wire transfer instructions, domain lookalikes, and urgent messages bypassing normal workflows.