Legit or Scam
Actors & infrastructure

Business Email Compromise (BEC)

Updated June 1, 2026Also called: bec, ceo fraud, email account compromise

A targeted scam impersonating an executive, vendor, or colleague to redirect payments or data.

BEC attacks impersonate a trusted business contact — a CEO requesting an urgent transfer, a vendor updating bank details, HR asking for payroll changes. They are among the costliest categories of cybercrime by reported losses.

For job seekers and new hires, BEC can appear as a “manager” requesting gift cards or a payroll-detail change soon after onboarding.

Red flags

  • Urgent payment or data request from a “boss” by email
  • A vendor suddenly changes bank account details
  • Request to keep the matter confidential

Deep-dive guide

Brand Impersonation & CEO Gift-Card Scams (BEC) in Hiring

Frequently asked questions

Why is BEC so costly?

BEC targets businesses with tailored, believable requests that move large sums quickly, often bypassing spam filters because there's no malicious link — just a convincing message. It consistently ranks among the highest-loss cybercrimes reported to the FBI.

Sources

Related terms

Spot it before it costs you

Legit or Scam turns terms like this into instinct. Drop into real-world offers, recruiter DMs, and texts, and see how many you can call correctly.

Play Legit or Scam

Educational content only — not legal, financial, or security advice. Scenarios and company names are illustrative.