Business email compromise
Business email compromise is when scammers trick employees into sending money or data by pretending to be a trusted colleague or boss.
A business email compromise is a scam where attackers gain access to an employee's email account and use it to send fake messages to colleagues or business partners. These emails often ask for urgent actions like transferring money or sharing sensitive information. The scammer might pretend to be a manager, client, or vendor to make the request seem legitimate.
Why it matters
Business email compromise can lead to serious financial loss and damage to a company's reputation. Attackers often use phishing emails or malware to steal login credentials, allowing them to control the email account and send fraudulent messages.
What to do
Verify all urgent requests through other communication channels, such as a phone call or in-person confirmation. Use multi-factor authentication for email accounts to make it harder for attackers to access them. Train employees to recognize phishing attempts and always double-check the sender's email address before responding to any request. Never click on suspicious links or download attachments from unknown sources.
- Always confirm urgent requests via a second method
- Enable multi-factor authentication on all email accounts
- Train employees to spot phishing emails and suspicious messages