Business Email Compromise: The Fake Invoice That Looks Exactly Real
An email arrives from a vendor you pay every month. The invoice looks right, the tone is normal, and there’s one small change: their bank details have been updated. Someone pays it. Weeks later, the real vendor asks where their money is.
That’s business email compromise (BEC), and it works because it contains no virus and no suspicious attachment. It just looks like ordinary business.
How These Scams Work
-
Vendor impersonation: A criminal poses as a supplier and asks for payment to a new account.
-
Executive impersonation: A message that appears to come from the owner or CEO urgently asks for a wire transfer or gift cards.
-
Account takeover: The attacker has actually broken into a real mailbox, so the message really does come from a trusted address and can slip into an existing conversation.
-
Payroll diversion: A fake employee request to change direct-deposit details.
Warning Signs
-
A change to payment instructions, especially with urgency or secrecy attached
-
A sender address that is slightly off, or a reply-to address that doesn’t match
-
Pressure to skip the normal approval process
-
Requests for unusual payment methods
Controls That Actually Stop It
-
Verify by phone: Confirm any payment change using a number you already have on file, never one in the email.
-
Require two-person approval for wires and changes to payment details.
-
Turn on multi-factor authentication for every mailbox to prevent account takeover.
-
Use advanced email filtering that flags lookalike domains and impersonation attempts.
-
Train your team so finance staff feel empowered to pause and ask.
Would Your Team Catch a Fake Invoice?
Atech Business Services helps businesses put email security and payment safeguards in place so one convincing message can’t cost you real money.
Schedule a complimentary consultation to review your email protection and payment controls.
