Determine And Investigate Service Email Compromise (bec) Scams 🎁

: A sudden request to change payment instructions or bank account details for a known vendor is a major indicator.

: Scams often use high-pressure language (e.g., "urgent," "strictly confidential") to force quick action without verification. : A sudden request to change payment instructions

: Attackers use "lookalike" domains (e.g., company-inc.com instead of companyinc.com ) or spoofed display names to appear legitimate. : A sudden request to change payment instructions

Detecting a BEC attempt requires looking for psychological and technical anomalies: : A sudden request to change payment instructions

: Requests that deviate from standard business procedures, such as a CEO asking an assistant to buy gift cards, are common lures. Investigating a Suspected Incident