Business Email Compromise (BEC) is fraud carried out through compromised or spoofed business email accounts — typically to redirect payments or data.
In detail
Attackers gain access to or impersonate a trusted email account, then manipulate communication — for example, changing bank details on an invoice.
BEC is one of the most financially damaging attack types because it exploits trust and process, not just technology.
Related terms
Last updated: 5 June 2026 · 4 min read