Simple definition
BEC is a fraud that uses email and a credible identity to obtain a payment, information or an unauthorized action.
Purpose and use
Attackers often try to divert invoices or change bank details while impersonating an executive or supplier.
How does it work?
The fraud may use a genuinely compromised mailbox, sender impersonation or a lookalike domain. A malicious attachment is not required.
Key points
- Example: an urgent request for new bank details appears in an otherwise familiar invoice conversation.
- Confirm the request through an independently known channel and investigate sign-ins and mailbox rules when compromise is suspected.
Points to watch
SPF, DKIM and DMARC cannot by themselves stop fraud sent from a legitimate compromised account. Payment verification procedures remain essential.
In short
BEC abuses trust in business communication to induce a fraudulent action.