Business Email Compromise: How Fraudsters Redirect Payments

Business email compromise (BEC) uses fake or hijacked emails to trick staff into sending money or sensitive data.

Common forms

• A “CEO” asking for an urgent transfer.
• A supplier sending new bank details.
• Payroll change requests.
• Fake invoices that look identical to real ones.

Defences

• Verify payment changes by phone using a known number.
• Require two approvals for large transfers.
• Turn on 2FA for email accounts.
• Train staff to spot lookalike domains.

If it happens

Contact your bank immediately to try to recall the payment, report to the authorities and secure email accounts.