The CEO Who Wasn't: A BEC Comedy of Errors
business email compromiseBEC scamphishing attackemail fraudCEO fraudwire transfer scamcybersecurity awarenesssocial engineering
When the boss emails urgently for a wire transfer, one employee's suspicion saves the company from a costly Business Email Compromise scam.
shield
Stop BEC Attacks
1
Always verify urgent financial requests via phone or in-person, never by replying to the email
2
Check email addresses carefully for slight misspellings or domain variations
3
Implement multi-person approval workflows for wire transfers and sensitive transactions
4
Enable email authentication protocols like SPF, DKIM, and DMARC to detect spoofing
5
Train employees to recognize red flags: unusual urgency, bypassing normal procedures, or requests for secrecy
