Skip to main content

Business email compromise

Protect your business and employees from phishing attacks designed to steal your money, goods or information.

Icon of an envelope with a magnifying glass over it

What is business email compromise?  

Business email compromise (BEC) is a form of targeted phishing, or spear phishing. Criminals target organisations and try to scam them out of money or goods. They also target employees and try and trick them into revealing important business information.   

Criminals use emails to pretend to be business representatives. They also use the compromised email accounts of employees.

Icon of a person wearing a headset

If you’ve been targeted  

  1. Report to authorities: Report the incident to us at ReportCyber.
  2. Check account security: Secure any compromised accounts.  
  3. Notify contacts and relevant third parties: Alert other employees and clients. Certain businesses have mandatory reporting obligations with regards to customer data breaches.    
  4. Seek assistance defending your online brand: Domain names are your internet mail address and your online business identity. If your company has been impersonated, reach out on ReportCyber.  
  5. Contact the email provider: If someone is using an email service to impersonate you (like Gmail or, report this to the provider. 

2 minute quiz

Would you know what to do if you were a victim of business email compromise?

Content complexity
This rating relates to the complexity of the advice and information provided on the page.
Was this information helpful?
Was this information helpful?

Thanks for your feedback!


Tell us why this information was helpful and we’ll work on making more pages like it