Who is Ultimately Responsible for Business Email Compromise?

Business Email Compromise (BEC) is identified as a significant and growing cyber‑crime in South Africa, where attackers impersonate legitimate email accounts to trick employees into authorizing fraudulent payments. The report defines BEC, cites an estimated global financial impact (~$4.88M), highlights legal and reputational consequences (including POPI Act exposure), and recommends mitigations such as employee training, multi-factor authentication, strict payment protocols, and advanced email security, with organizations engaging specialist firms like DaVinci Cybersecurity for assistance.