Business Email Compromise (BEC)

How to Spot Business Email Compromise (BEC) Scams and How to Keep Safe

Business Email Compromise (BEC) scams are a highly targeted form of fraud where criminals trick individuals or organisations into sending money or sensitive information to the wrong place. Unlike many other scams, BEC attacks often involve careful planning and research, making them particularly convincing.

These scams typically target businesses, charities, schools, and anyone responsible for making payments or handling sensitive financial information.

Understanding how BEC scams work is essential, because a single successful attack can lead to significant financial losses.

What Is a Business Email Compromise (BEC) Scam?

A Business Email Compromise scam happens when a criminal gains access to, impersonates, or spoofs a legitimate email account in order to trick someone into:

  • Transferring money to a fraudulent bank account.
  • Changing supplier payment details.
  • Sharing sensitive company or personal information.
  • Sending confidential documents such as invoices or payroll data.

Unlike generic phishing emails, BEC scams are often carefully tailored to the victim, making them harder to detect.

How BEC Scams Work

BEC scams usually follow a few common patterns:

  1. The scammer researches the organisation or individual.
  2. They identify people responsible for payments or finance.
  3. They impersonate a trusted figure or supplier.
  4. They send a convincing email requesting urgent action.
  5. Funds or data are redirected to the scammer.

In some cases, criminals gain access to a real email account and monitor conversations before striking at the right moment.

Common Types of BEC Scams

Fake Invoice and Payment Redirection Scams

Scammers pose as a known supplier and send an email requesting that future payments be made to a “new” bank account.

The new account is controlled by the criminal.

CEO or Executive Fraud

The scammer impersonates a senior manager or director and instructs staff to:

  • Make urgent bank transfers.
  • Purchase gift cards or cryptocurrency.
  • Share sensitive payroll or HR information.

The message often relies on urgency and authority.

Account Compromise Scams

A legitimate email account is hacked and used to send real-looking messages to colleagues, clients, or suppliers.

Because the message comes from a genuine account, it is much harder to detect.

Lawyer or Legal Impersonation Scams

Criminals pose as solicitors or legal representatives and demand urgent payments or confidential documents under the threat of legal action.

Payroll Diversion Scams

Employees receive fake emails requesting that salary payments be redirected to a different bank account.

This often results in direct financial loss to staff.

Warning Signs of a BEC Scam

BEC scams are often subtle, but there are warning signs to watch for.

Unexpected Changes to Payment Details

Be cautious if you receive instructions to:

  • Change supplier bank account details.
  • Send payments to a new account.
  • Update payment information urgently.

Always verify changes independently.

Urgent or High-Pressure Requests

Scammers often create urgency with phrases such as:

  • “Please process immediately.”
  • “Urgent payment required.”
  • “Do not delay.”
  • “Confidential—act now.”

Pressure is used to bypass normal checks.

Slight Email Address Differences

Look carefully for:

  • Misspelled domains.
  • Extra characters or numbers.
  • Free email services instead of corporate domains.
  • Display names that don’t match the actual address.

Unusual Tone or Writing Style

Even if the email looks legitimate, it may feel slightly off:

  • Different wording from usual communication.
  • Overly formal or overly casual tone.
  • Spelling or grammar inconsistencies.
  • Requests that don’t match normal business procedures.

Requests to Bypass Procedures

Be cautious if someone asks you to:

  • Skip approval steps.
  • Keep the request secret.
  • Avoid contacting other staff.
  • Act outside normal payment processes.

Why BEC Scams Work

BEC scams succeed because they exploit trust, routine, and authority.

People often assume that an email from a manager or supplier is genuine, especially when it fits expected workflows. Scammers rely on this assumption and carefully time their messages to match real business activity, such as invoice cycles or payroll dates.

How Family and Friends Can Help

If someone you know works in finance, administration, or runs a small business:

  • Encourage them to verify any change in payment details by phone.
  • Remind them never to rely solely on email instructions.
  • Suggest using a known contact number rather than email reply details.
  • Talk about common scams involving invoices, suppliers, and payroll.
  • Encourage a “pause and check” habit before sending money.

How to Keep Safe

Always Verify Payment Changes Independently

If a supplier or colleague requests new bank details:

  • Call them using a trusted phone number.
  • Do not use contact details from the email itself.

Use Dual Approval for Payments

Where possible, ensure that payments require:

  • Two-person approval.
  • Verification against purchase orders.
  • Confirmation from a separate communication channel.

Check Email Addresses Carefully

Always inspect the full sender address, not just the display name.

Be Wary of Urgency

Slow down when emails demand immediate action. Urgency is a common manipulation tactic.

Protect Email Accounts

Use:

  • Strong, unique passwords.
  • Two-factor authentication (2FA).
  • Regular password updates for sensitive accounts.

Educate Staff and Family Members

Training and awareness significantly reduce the risk of BEC scams in workplaces and households.

What To Do If You’ve Been Scammed

If you suspect a Business Email Compromise scam:

  1. Contact your bank immediately to attempt to stop or recall the payment.
  2. Report the incident to your organisation’s IT or finance team.
  3. Preserve all emails and communication as evidence.
  4. Contact the genuine supplier or colleague using verified contact details.
  5. Change passwords and secure email accounts.
  6. Report the fraud to the relevant fraud authority in your country.

Fast action is critical, as BEC payments are often moved quickly through multiple accounts.

Final Thoughts

Business Email Compromise scams are among the most financially damaging forms of fraud because they are targeted, convincing, and often timed to exploit routine business processes.

The most effective protection is not speed, but verification. Taking a few extra minutes to confirm payment changes through a trusted channel can prevent serious financial loss.

If someone you know is responsible for payments, encouraging a habit of independent verification and caution with email instructions can make a major difference in preventing fraud.