Business Email Compromise (BEC) is one of the most common threats today. It employs tactics like impersonating an executive, HR, or a trusted vendor to initiate fraudulent transfers of money. According to the FBI, $1.7 billion was lost to BEC in 2019 alone.
Last-minute changes in wiring instructions or recipient account information must be verified.
Verify any changes and information via the contact on file—do not contact the vendor through the number provided in the email.
Ensure the URL in the email is associated with the business it claims to be from.
Be alert to misspelled hyperlinks in the actual domain name.
Verify the email address used to send emails, especially when using a mobile or handheld device, by ensuring the sender’s email address appears to match who it’s coming from.
Often there are clues with Business Email Compromise:
If something looks awry, report it to us or a supervisor. And if you have been a victim of BEC, file a detailed complaint with http://www.ic3.gov.