Cybersecurity glossary
What is business email compromise?
Also known as: BEC, invoice fraud, CEO fraud
Definition
Business email compromise (BEC) is fraud in which a criminal impersonates or takes over a trusted email account to trick an organization into sending money or sensitive data.
Why it matters
Typical scenarios are a fake supplier asking to update bank details, or a message that appears to come from an executive requesting an urgent transfer. Because many BEC emails contain no link or attachment, technical filters miss them.
Call-back verification of payment changes on a known number, dual approval of payments, MFA on email and DMARC on your domain are the core controls.
Common questions about business email compromise
See also
Sources
Related Guides
GuideIncident Response
The Binance Hack Timeline: How a 93-Cent Transaction Drained $6.3 Billion
A minute-by-minute account of the October 2026 Binance hack: the EIP-7702 sweep, the freeze race, the "one laptop" explanation, the North Korea attribution and where the money is now.
Read more GuidePersonal Security
10 Ways to Keep Your Funds Safe on a Crypto Exchange After the Binance Hack Reports
Binance is investigating a suspected hot wallet hack. Here are 10 practical steps to protect crypto held on any exchange: account security, withdrawal limits, self-custody and scam awareness.
Read more GuideGRC
10-Point GDPR Compliance Checklist for Security and Privacy Teams
A practical GDPR checklist covering data mapping, lawful basis, records of processing, PII protection, DPIAs, processor contracts, data subject rights, international transfers and 72-hour breach notification.
Read more GuidePersonal Security
5 Signs Your Phone May Be Hacked
Learn 5 signs your phone may be hacked, the innocent explanations, and how to check your Android or iPhone, secure your accounts and recover safely.
Read more