Prevent Business Email Compromise Attacks | Huntress

**Executive Summary:** This guidance explains Business Email Compromise (BEC) attacks — how adversaries use compromised or spoofed email accounts, lookalike domains, and social engineering (often creating a false sense of urgency) to initiate fraudulent wire transfers — and provides practical mitigations including reviewing and enforcing fund-transfer procedures, requiring out-of-band verification and multi-person approvals, scrutinizing sender domains and unusual requests, promptly notifying banks and management if a compromise is suspected, and running regular security awareness training and simulations for employees.