BEC scams target payments, not passwords. They impersonate vendors, executives, or partners to redirect funds.
How BEC Works
-
Attacker compromises or spoofs email
-
Sends urgent payment request
-
Changes wiring instructions
-
Victim transfers money
Prevention
-
Verify payment changes by phone
-
Use MFA on business email
-
Train staff regularly
For a full breakdown of how phishing works and how to protect yourself end-to-end, read our Email Phishing: Complete Guide to Prevention (2026).
Related guides
- Email Phishing: Complete Guide to Prevention (2026). The pillar covering how phishing (including BEC) actually works
- What Is Social Engineering? Scam Psychology. The persuasion techniques BEC scammers use to build trust
- How to Tell If an Email Is Phishing (10 Red Flags). The checklist to run when a vendor payment request feels off
- Clicked a Phishing Link? Here's What To Do Immediately. Response steps if a BEC email got through
🛡️ Know your security score?
Take the Free SurfSafe Identity Quiz
20 questions. 2 minutes. Find out exactly how exposed your digital identity is — and get a personalized action plan.