CEO fraud
Tricking peopleComes in through: Email and phone
An urgent payment order that isn't from who it says
Someone poses as the manager, a director or a regular supplier and asks for an urgent transfer or a change of bank account. No virus needed: just someone who pays without checking.
Threat mapHow it happens
- 1
The groundwork
The attacker studies the company: who approves payments, which suppliers you use, when management is travelling.
- 2
The order
An email or call arrives "from the boss" or "from the supplier" with an urgent, confidential request.
- 3
The payment
The transfer goes to the attacker's account. By the time it's noticed, the money has moved.
How to spot it
- Urgency and secrecy: "don't mention this to anyone"
- A change of bank account sent by email
- An unusual request from someone who doesn't normally ask for that
- An email address very similar, but not identical, to the real one
How to protect yourself
- Verify any account change through another channel, using a known number
- Two approvals for payments above a set amount
- Train accounts staff and management on this type of fraud
- Protect management's email accounts with two-factor
If it has already happened
Call the bank immediately to try to stop or hold the transfer, and report it to the police. Also check whether someone's email account at the company has been compromised.
How we help
Training
Fake invoices and CEO fraud
A practical course so your team recognises it in time.
Audit
We check whether this door is open in your company and how to close it.
Full guide · in Spanish
Fraude del CEO (BEC): qué es y cómo evitarlo en tu empresa
Other threats through this door
See all threatsHow many of these risks does your company have right now?
Take the cybersecurity test and discover your exposure level in 3 minutes. You'll get your score with the highest-risk areas, no sign-up required.
Free · No sign-up · 3 minutes