Business Email Compromise (BEC) is a sophisticated cyber scam where attackers impersonate company executives, employees, or trusted suppliers via email. The goal is to trick staff - often in finance or HR - into transferring funds or revealing sensitive information. Attackers typically use social engineering, phishing, or spoofed email addresses to appear legitimate. BEC attacks can cause significant financial losses and reputational damage. Unlike traditional phishing, BEC relies on targeted, well-researched messages rather than mass emails. Organizations can reduce the risk by training employees, implementing multi-factor authentication, and verifying payment requests through multiple channels.