Skip to content
CarrierKYC

Glossary · Fraud

Business email compromise (BEC)

Also called: BEC, Email account compromise, EAC

Definition

Business email compromise (BEC) is a scam in which criminals use a hacked or spoofed business email account to trick someone into sending money or sensitive data.

The FBI's Internet Crime Complaint Center (IC3) describes BEC as a sophisticated scam that often relies on taking over legitimate email accounts through social engineering or computer intrusion. IC3 counted about $55.5 billion in exposed losses worldwide from October 2013 through December 2023.

In freight factoring, BEC usually arrives as a payment change. An email from a client's real or spoofed address asks you to update its bank account. An email that appears to come from a factor tells brokers to send payments to a new account. Or a message posing as a debtor asks for invoice copies or statements to be sent somewhere new.

Never act on a bank change by email alone. Call back at a number you held before the request, confirm the account belongs to the carrier, and hold the next payment until it is verified. The remit-to change checklist sets out the full procedure.

Sources

  1. 01FBI IC3: Business Email Compromise: The $55 Billion Scam · Public service announcement I-091124-PSA, 2024-09-11
  2. 02FBI IC3: Business email compromise · Internet Crime Complaint Center

For factoring companies

Stop paying the wrong account.

CarrierKYC verifies that the person onboarding controls the carrier and that the bank account belongs to it, then re-verifies every remit-to change before the next ACH. Free 60-day pilot for small factors.

Monthly · free

The Freight Identity Risk Report

New authorities, revocations, insurance cancellations, and shared-contact clusters from FMCSA data, every month. One email. Unsubscribe in one click.