Scams
Business email compromise
In Turkish: İş e-postası dolandırıcılığı (BEC)
A fake email from a boss, supplier or colleague asks for an urgent payment or a change of bank account details.
The attacker either hijacks a real mailbox or sends from a lookalike address, and writes in the style of the person. They ask for a transfer "today", a new IBAN for an invoice, or gift cards, and ask you to keep it quiet.
Because it looks like normal business, it is easy to miss. A second, separate check on any change of payment details stops most of these.
What to do
- Confirm any new IBAN or urgent payment request by phone, using a number you already have.
- Look closely at the sender address, one changed letter can be enough to fool you.
- Make payments need two people in your company where you can.
Related terms
Learn it in the Academy
Try it
Free tools that put this to use.
- Lookalike domain finder
See which fake spellings of your domain already exist, the kind used for phishing.