This site uses cookies to improve your experience. To help us insure we adhere to various privacy regulations, please select your country/region of residence. If you do not select a country, we will assume you are from the United States. Select your Cookie Settings or view our Privacy Policy and Terms of Use.
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Used for the proper function of the website
Used for monitoring website traffic and interactions
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Strictly Necessary: Used for the proper function of the website
Performance/Analytics: Used for monitoring website traffic and interactions
Business EmailCompromise (BEC) is a cyber threat that exploits the vulnerabilities of email communication. Perpetrators impersonate trusted entities, such as executives or vendors, employing social engineering techniques to coerce employees into compromising actions. What is Business EmailCompromise (BEC)?
But don’t let the good news fool you: just because business emailcompromise scammers may not be targeting c-suite executives doesn’t mean their fraudulent crimes are easing. million was allegedly forged in company checks by an accounts officer at a family-owned Singapore-based business, Straights Times recently reported.
Business emailcompromise (BEC) attacks can be a major risk to businesses’ finances and reputations. Let’s look at what business emailcompromise attacks are and explore some of the many ways you can combat them. What Is a Business EmailCompromise Attack? Reported losses in 2020 exceeded $4.2
They poke and prod, looking for various weaknesses to be exploited on online platforms, in company emails (as in Business EmailCompromise, or BEC), through text messages and even the old-fashioned phone call that induces a victim to hurry online and send some money. Internet scammers, by nature, are a resourceful lot.
Mike Vigue, vice president, product strategy, cyberfraud and risk management at B2B payments firm Bottomline Technologies , warns that ongoing use of paper checks, fraudulent emails and general ignorance of cyberthreats will continue to place businesses — and their payment activities — at the center of thieves’ targets.
” That includes malware and phishing schemes, extortion, business emailcompromise and more, sometimes involving demands for cryptocurrency. FinCEN warns that bad actors “are engaged in fraudulent schemes that exploit vulnerabilities created by the pandemic.”
” Paper checks are a particularly weak spot for organizations as check fraud balloons. With accounts payable professionals working remotely, Anderson said he’s heard from some firms whose AP staff have had to physically take check-printing machines to their homes — opening up the door for fraudulent activity.
200%: Growth in business emailcompromise attempts between April 2020 and May 2020. 80.8%: Share of AP departments paying suppliers with paper checks in 2019. $5T: And in retail, Amazon ’s earnings were off the charts by any metric, and they didn’t come from cost-cutting. All this, Today in Data.
But the statistic is no cause for celebration: according to the report, the decline in data breaches can be attributed to the fact that cybercriminals are instead turning their attention toward Business EmailCompromise (BEC) scams that target company accounts payable departments.
Although it occurred under dire circumstances, 2020 was the year that many organizations finally ditched the paper check in B2B payments — or, at the very least, helped to move the needle toward electronic payments. The pandemic and work-from-home requirements left organizations to act fast when it came to sending or receiving paper checks.
PYMNTS’ examination of recent cases finds employees falsifying invoices, doctoring checks and faking out companies to steal money from employers. Ten percent of business email domains are protected from spoofing , according to recent Security Boulevard reports. According to local Kentucky Today reports, $1.5
The 2020 Association for Financial Professionals (AFP) Payments Fraud and Control Survey underwritten by JPMorgan found that business emailcompromise (BEC) was the most noted origin of tried or actual fraud incidents in 2019, according to an announcement. That figure marks the second-highest percentage in the past 10 years.
Automated attacks such as ransomware, business emailcompromise, and system-level takeover fraud, outpaced high-touch attack methods such as check fraud, the survey said.
In Ireland, police are sounding the alarm on the threat of B2B payments fraud after multiple businesses lost hundreds of thousands of dollars to business emailcompromise (BEC) scams. Hassold provided a public comment on the vendor emailcompromise scam. Meanwhile, in the U.K.,
The FBI has once again sounded the alarm on the proliferation of digital fraud like ransomware and the business emailcompromise (BEC) scam, releasing new stats on the financial damage such criminal activity has caused in the U.S. in recent years.
However, instances of the business emailcompromise scam continued to climb, with 80 percent of companies surveyed reporting they were targeted by a BEC scam, up from 77 percent in 2017. Firms with revenue below $1 billion actually saw a decrease in fraud attempts in 2018, from 73 percent in 2017 to 69 percent last year.
“Fraudsters perpetrating such schemes often target individuals by phone, posing as bank officials, Internal Revenue Service (IRS) agents or public health administrators and asking for personal information or money in exchange for COVID-19 test kits, stimulus checks or work-from-home jobs.
Business emailcompromise (BEC) scams continue to ravage company coffers. According to CNBC reports , the email phishing scheme involves attackers impersonating one business executive at a China-based business that offers temperature-controlled supply chain solutions.
Fraudsters perpetrating such schemes often target individuals by phone, posing as bank officials, IRS agents or public health administrators and asking for personal information or money in exchange for COVID-19 test kits, stimulus checks or work-from-home jobs. The Dark Web Likes Bitcoin, Too .
Nearly a fifth that experienced check fraud suffered a loss, and one-third of firms that were targeted by fraud said it came from a completely unknown source. More commonly, these fraudulent transactions are only caught the day they post to the company’s bank account (the same goes for check fraud, the report found).
Those new avenues of fraud have leveraged hallmarks of the current pandemic — fears over public health and concerns about stimulus checks issued by the government — to snare unwitting victims. . . The pandemic has pushed us to do all things digitally while opening up new vectors of attack.
74 percent | Percentage of companies that were tricked by 2016 business emailcompromise (BEC) scams. 51 percent | Decline in the use of physical checks in B2B transactions. Here are the numbers: 75 percent | Percentage of companies experiencing wire fraud in 2016.
A recent warning from the Federal Bureau of Investigation revealed that business emailcompromise (BEC) scams have now led to $12 billion in diverted funds.
The fraud firm uses “physical checks to cash out money pilfered through business emailcompromise (BEC) attacks,” and it is “spread around multiple countries in Africa, including Nigeria, Ghana and Kenya,” a press release said. .
2,100 corporates were targeted in a widespread business emailcompromise (BEC) scam recently uncovered by cybersecurity company Agari , the firm revealed last week. Reports in the Pittsburgh Post-Gazette said a former controller at the company has admitted to the theft by generating payroll checks to pay her own contracting company.
Business emailcompromise (BEC), B2B phishing scams, synthetic identities, fake accounts and trillions of aid dollars flooding out at a time of maximum uncertainty make this a fraudster’s paradise. COVID-19 has afforded internet villains what will certainly go down as the greatest cybertheft opportunity of their shadowy lifetimes.
One of the largest culprits: paper checks. Last year the AFP marked an unexpected reversal in the decline of the use of checks in B2B transactions, inching up 1 percent to 51 percent last year compared to 2013 levels (that survey is conducted every three years). Another issue with check use is that, at least in the U.S.,
The business emailcompromise (BEC) scam continues to rear its ugly head at the enterprise, with the global pandemic creating even more avenues through which cyber attackers can steal company money. At the heart of BEC and other scams is impersonation.
It’s a twist on the business emailcompromise (BEC) scam that typically involves scammers emailing business owners and seeking payment via wire transfer, ACH or paper check. “This is a scam, pure and simple.
Authorized fraud also encompasses business emailcompromise (BEC) scams, too, said Tharle. Check out our infographic to learn more about the continuing #evolution in fraud trends & how you can protect your firm from potential risks #fincrime #fintech #AML pic.twitter.com/dJbSqTgL0D.
If the Business EmailCompromise (BEC) scam isn’t on the radar of every corporate finance executive, it certainly should be. While 54 percent of those scams involved wire transfers, more than a third targeted check payments. The checks were forged from one of our disbursement accounts.”
But the bad guys, armed with that very wealth of knowledge, schooled in what works in victimizing companies across sophisticated avenues such as business emailcompromise scams, are conducting asymmetrical warfare. Paper checks can be altered, signatures forged. Wire transfers can be steered toward fraudsters’ bank accounts.
As noted in a report by FireEye, the bad guys are continuing to leverage a tactic known as business emailcompromise (BEC), where that method of communication seeks to impersonate persons of authority from within a firm, or alternatively, legitimate business partners, to requests funds be sent to accounts (and then of course, pilfered).
Much has been said in this space about Business EmailCompromise ( BEC ) scams, where bad actors frequently pose as corporate officials, directing targeted individuals to send money to different accounts, or they pose as suppliers and present phony invoices to be paid. He had been accused of stealing $5.3
Scammers deploying the Business EmailCompromise (BEC) scam have proven no company, regardless of size and industry, is immune to this crime. Somebody sent out another email saying, ‘Ignore my previous invoice. Reports said hackers had infiltrated their emails and been impersonating both sides of the correspondence.
When it comes to business-to-business (B2B) transactions, paper checks are often the villain, cards an expensive but quick underdog, and ACH and its non-U.S. Companies, meanwhile, should “never blindly accept and approve a payee request by email,” said Mugford. Thieves attempted to steal $5.3
Thus, business emailcompromise fraud (BEC) is evolving too. The Association for Financial Professionals ( AFP ) found that although automated clearing house transactions are generally regarded by CFO.com to be relatively “safer” than other types of transactions — say, paper checks — fraud involving ACH is on the rise.
Themes emerged, some frightening – as when it comes to getting a sense of the impact of payments fraud – and some hopeful, as evidenced in, say, businesses finally moving toward killing the check. He described this as a “group of both business emailcompromise , BEC as it’s called, or CEO fraud.”. Good vs. Bad.
Combined card, remote banking and check fraud in Q1 2017 was 8 percent lower than in H1 2016, the company said last week. Earlier this year, TD Bank warned that this scam, known as the business emailcompromise in the U.S., A fifth of NACHA attendees said the attack appeared in the form of a business emailcompromise.
All computers were checked and antivirus scans assured staff that they were virus free.”. According to the cybersecurity firm, the malware is triggered via the business emailcompromise scam, in which someone is sent an email with a seemingly legitimate invoice in PDF form.
Chaos and disarray, of course, have been the hallmarks of the pandemic, and even of the leap in moving from paper checks and in-person commerce and banking to digital conduits. So, it might start with a counterfeit check, but it comes from social engineering from social media,” she offered as an example.
Paper checks for domestic suppliers, wire transfers for international ones. Most businesses and accountants still rely on antiquated, paper-based methods to manage some stages of their process,” he said in an emailed interview with PYMNTS, pointing to the continuing popularity of checks and wire.
Reports last year from the Association for Financial Professionals found 75 percent of businesses surveyed said they had fallen victim to check fraud in 2017, up from 71 percent in 2015. The business emailcompromise scam saw an increase of 10 percent during those two years.
We organize all of the trending information in your field so you don't have to. Join 5,000+ users and stay up to date on the latest articles your peers are reading.
You know about us, now we want to get to know you!
Let's personalize your content
Let's get even more personalized
We recognize your account from another site in our network, please click 'Send Email' below to continue with verifying your account and setting a password.
Let's personalize your content