What is business email compromise? Business email compromise (BEC) is a form of targeted phishing, or spear phishing. Criminals target organisations and try to scam them out of money or goods. They also target employees and try and trick them into revealing important business information. Criminals use emails to pretend to be business representatives. They also use the compromised email accounts of employees. An icon to indicate an area of information Want to learn more? Read about the risks and how to protect yourself and recover from BEC on our Protecting Against Business Email Compromise page. If you’ve been targeted Report to authorities: Report the incident to us at ReportCyber. Check account security: Secure any compromised accounts. Notify contacts and relevant third parties: Alert other employees and clients. Certain businesses have mandatory reporting obligations with regards to customer data breaches. Seek assistance defending your online brand: Domain names are your internet mail address and your online business identity. If your company has been impersonated, reach out on ReportCyber. Contact the email provider: If someone is using an email service to impersonate you (like Gmail or Outlook.com), report this to the provider. 2 minute quiz Would you know what to do if you were a victim of business email compromise? Loading... Content complexity Simple This rating relates to the complexity of the advice and information provided on the page.