Business Email Compromise (BEC): the scam that costs real money

BEC is when an attacker impersonates a director, supplier or client — often after quietly reading real email threads — to request an urgent bank transfer or a change to bank details. It rarely looks like typical phishing; it's well-written, references real context, and exploits trust rather than technical tricks.

Coach's tip: always verify any change of bank details or unusual payment request by phone, using a number you already have on file — never one from the email itself.