Established by a former federal prosecutor · 20+ years prosecutorial experience · $12.5B lost to fraud in 2024 (FTC)
The Fraud CodexScam Intelligence
Live Threats
NewPig-butchering scams estimated to have stolen $75B globallyAlertIRS impersonation scams surge this 2026 filing seasonNewFake Coinbase support calls reported nationwide
● CRITICAL THREAT

Business Email Compromise (BEC) & Wire Fraud

The costliest fraud there is, measured in dollars. A scammer impersonates an executive, vendor, or trusted partner over email and convinces an employee to wire funds or quietly change payment details. There is no malware to catch — it is social engineering aimed at whoever can move money. Verify any payment change by voice, on a number you already have.

Losses: $2.9 billion in reported losses in 2023 (FBI IC3)
Targets: Businesses of all sizes, finance and AP staff, real estate buyers, nonprofits
Updated: 2026-06-11
Also known as: BEC Scam · CEO Fraud · Invoice Fraud · Vendor Email Compromise · Wire Transfer Fraud
01

How It Works

BEC is the FBI's single most expensive cybercrime by reported dollar losses. It relies on impersonation and trust rather than malware — making it hard for filters to catch. **Common scenarios:** 1. **CEO fraud**: An email "from the CEO" urgently asks an employee to wire funds or buy gift cards, often "while I'm in a meeting and can't talk." 2. **Vendor / invoice fraud**: Scammers compromise or spoof a real supplier's email and send an updated invoice with new banking details. Payments route to the criminal. 3. **Real estate wire fraud**: Posing as a title company or agent, scammers email homebuyers fake wiring instructions for closing funds — losses can be a life's savings. 4. **Payroll diversion**: An email "from an employee" asks HR to change direct-deposit details to the scammer's account. 5. **Attorney impersonation**: Fake urgent, confidential requests citing a "time-sensitive deal." **The tell:** A change in payment details, urgency, secrecy, and a request to bypass normal verification — delivered by email.
How Scammers Make Contact
Spoofed or hacked email accountsLookalike domainsFollow-up phone calls
02

Warning Signs & Red Flags

  • Email requests an urgent wire transfer or gift card purchase
  • A vendor suddenly emails new or changed banking details
  • Sender domain is slightly misspelled (a lookalike of the real one)
  • Pressure for secrecy — "don't discuss this with anyone"
  • Request to bypass normal approval or verification steps
  • Reply-to address differs from the displayed sender
03

Real-World Example

"Our accounts-payable clerk got an email that looked exactly like it came from a supplier we'd paid for years. It said their bank had changed and gave new wiring details for a $48,000 invoice. Everything matched — logo, signature, the account manager's name. We wired it. The real supplier never got paid. The domain was off by one letter we never noticed."

— FBI Internet Crime Complaint Center (IC3)
04

How to Protect Yourself

  • Verify any payment change by calling a known number — never one from the email
  • Require dual approval for wire transfers and vendor banking changes
  • Confirm wiring instructions for real estate closings by phone with the title company
  • Scrutinize sender domains for subtle misspellings
  • Be suspicious of urgency, secrecy, and requests that skip normal process
  • Enable multi-factor authentication on all business email accounts
05

What To Do If You're a Victim

  1. 1Contact your bank immediately and request a wire recall / SWIFT recall
  2. 2Report to the FBI IC3 at ic3.gov within hours — fast reporting can freeze funds
  3. 3Ask the FBI about the Financial Fraud Kill Chain for recent transfers
  4. 4Notify the impersonated party (executive, vendor, or title company)
  5. 5Reset passwords and enable MFA on any compromised accounts
  6. 6Report to the FTC at ReportFraud.ftc.gov and preserve all email headers
Report This Scam
FTC Report Fraud FBI IC3 Identity Theft
?

Frequently Asked Questions

What is Business Email Compromise (BEC) & Wire Fraud?

The costliest fraud there is, measured in dollars. A scammer impersonates an executive, vendor, or trusted partner over email and convinces an employee to wire funds or quietly change payment details. There is no malware to catch — it is social engineering aimed at whoever can move money. Verify any payment change by voice, on a number you already have.

What are the warning signs of Business Email Compromise (BEC) & Wire Fraud?

Email requests an urgent wire transfer or gift card purchase. A vendor suddenly emails new or changed banking details. Sender domain is slightly misspelled (a lookalike of the real one). Pressure for secrecy — "don't discuss this with anyone". Request to bypass normal approval or verification steps.

How do I protect myself from Business Email Compromise (BEC) & Wire Fraud?

Verify any payment change by calling a known number — never one from the email. Require dual approval for wire transfers and vendor banking changes. Confirm wiring instructions for real estate closings by phone with the title company. Scrutinize sender domains for subtle misspellings.

What should I do if I'm a victim of Business Email Compromise (BEC) & Wire Fraud?

Contact your bank immediately and request a wire recall / SWIFT recall. Report to the FBI IC3 at ic3.gov within hours — fast reporting can freeze funds. Ask the FBI about the Financial Fraud Kill Chain for recent transfers. Notify the impersonated party (executive, vendor, or title company).

How serious is this threat?

We rate this critical — among the most damaging schemes we track. Reported losses: $2.9 billion in reported losses in 2023 (FBI IC3). Most exposed: Businesses of all sizes, finance and AP staff, real estate buyers, nonprofits.

Can I get my money back?

Recovery depends on how you paid. Credit card payments may be reversed through chargebacks, while wire transfers and cryptocurrency are rarely recoverable. Report immediately to your bank and file complaints with the FTC at reportfraud.ftc.gov and the FBI IC3 at ic3.gov.

How do I report Business Email Compromise (BEC) & Wire Fraud?

Report to the FTC at reportfraud.ftc.gov. For internet crimes, file with the FBI IC3 at ic3.gov. For identity theft, visit identitytheft.gov. You should also contact your local police and your bank.
Sources & References
  1. 01FBI: Business Email Compromise
  2. 02FBI IC3: BEC Public Service Announcement
  3. 03FTC: Business Email Imposters
  4. 04CISA: Avoiding Social Engineering and Phishing
Related Scams

Bank Impersonation Scam

Someone claiming to be your bank's fraud department says your account is under attack and that you need to move your money somewhere "safe." That somewhere is theirs. A real bank never asks you to transfer funds to protect them — the call itself is the fraud.

AI-Enhanced Phishing

Phishing used to give itself away with broken grammar. AI fixed that. The emails are now clean, personalized, and plausible, which means the old "look for typos" advice is dead. Verify any request through a channel you control, not the one that contacted you.

Deepfake CEO Fraud

A finance employee gets a live video call from the "CEO" authorizing an urgent wire — and the face and voice are AI fakes good enough to pass. Real money leaves on a fake instruction. Require a second, out-of-band approval for transfers, because the screen can now lie convincingly.

Think you've encountered this scam?

Use the free AI scanner to analyze suspicious messages, websites, or phone numbers.

Scan Now — It's Free