Business email compromise occurs when criminals hack or spoof an email account to impersonate an executive, colleague, supplier, accountant, or lawyer. They request payments, confidential information, or changes to payment details.

• An executive asks for an urgent transfer or gift cards.
• A supplier invoice is intercepted and its account details are changed.
• A familiar contact requests a new bank account for future payments.
• A property deposit or other high-value payment is redirected.

• Verify payment requests and account changes by calling a known number.
• Use approval procedures requiring more than one person for high-value payments.
• Enable multi-factor authentication and keep software updated.
• Check sender domains, signatures, tone, attachments, and payment details for small changes.