Business email compromise (BEC) is a type of cybercrime where attackers impersonate a legitimate business contact through email to deceive an organization into transferring money or sensitive information. The scam typically involves the attacker gaining access to or spoofing a trusted email account, such as that of a company executive or vendor, and then using that account to send fraudulent requests that appear authentic. These requests might instruct employees to wire funds, reveal confidential information, or change payment details to accounts controlled by the attackers. BEC attacks rely heavily on social engineering tactics rather than technical exploits, making them difficult to detect and prevent.