Skip to content

Glossary: Security Testing and Awareness Training

Business email compromise (BEC)

Also written: BEC

Fraud that uses a taken-over business email account, or a look-alike one, to trick staff into sending money or data. It often has no link or malware, like the fake Andes Beans invoice with new bank details sent to Jo.

Where the book teaches it

Related terms

CEO fraudVendor email compromisePayroll diversionLook-alike domainOut-of-band verificationReply-To header