Don’t pay the
wrong people!

Business email compromise

Business Email Compromise (BEC) is a type of cyber attack in which the attacker gains access to a business email account and uses it to defraud the company, its employees, or its customers. The attacker may send fraudulent emails to trick the recipient into wiring money to a fraudulent account, disclosing confidential information, or taking other harmful actions.

Vendor email compromise

Vendor Email Compromise (VEC) is a type of cyber attack that is similar to Business Email Compromise (BEC) but with a focus on targeting the vendors or suppliers of a company rather than the company itself.

In a VEC attack, cybercriminals will target the email accounts of vendors or suppliers that have a relationship with the targeted company. The attacker will use the compromised email account to send fraudulent emails requesting urgent payments, changes in payment details, or sensitive information. The emails may appear to be legitimate and may use social engineering tactics to persuade the recipient to take action.

Fake invoices scam

A fake invoice scam is a type of cyber fraud in which scammers send fraudulent invoices to businesses or individuals, usually through email. These invoices may appear to be legitimate, often using branding and logos of well-known companies, and may even reference specific products or services that the recipient has purchased or requested.

The scammer's objective is to trick the recipient into making a payment for goods or services that were not actually provided or authorized. The payment is usually made to a bank account controlled by the scammer, and once the payment is made, it is very difficult to recover the funds.

Social engineering scams

Social engineering scams targeting businesses involve the use of psychological manipulation tactics to trick employees into disclosing sensitive information or performing actions that benefit the attacker. These scams can take many forms and are often designed to exploit human weaknesses such as trust, fear, or curiosity.

One common type of social engineering scam is phishing. This involves sending fraudulent emails or messages that appear to be from a trusted source, such as a colleague, vendor, or customer. The message may request sensitive information or ask the recipient to click on a link or attachment that installs malware on their computer, giving the attacker access to their data.

Hacked accounting software

If a hacker gains access to a company's accounting system, they may be able to divert payments by manipulating or falsifying invoices, changing bank account details, or intercepting and redirecting payments.

Insider Fraud

Insider fraud is a type of fraud that is committed by individuals who have authorized access to a company's systems, data, or assets. This could include employees, contractors, or other individuals who have been granted access to confidential or sensitive information.

Insider fraud can take many forms, such as embezzlement, theft of intellectual property, or unauthorized disclosure of sensitive information.