How to avoid business email compromise scams
PURPOSE
Business email compromise scams use trusted-looking accounts or impersonation to commit fraud.
COMMON SCENARIOS
Payment redirection, fake invoices, payroll changes, vendor bank changes, executive requests, and compromised email threads.
WARNING SIGNS
Look for changed payment details, urgent timing, secrecy, new bank accounts, slightly altered domains, or unusual tone.
WHAT TO DO
Pause the process and verify through a trusted separate channel.
REPORT
Report suspected compromise quickly, especially if money, credentials, or sensitive files are involved.