--- title: "Business Email Compromise: What is it, and How Can it Affect Me?" description: "You may have heard the statistic: 90% of breaches start with email. You may be thinking you’re not going to be the one who gets breached... Or are you?" image: https://blog.teamascend.com/hubfs/Blog%20Feature%20Images/081018_BEC.jpg --- [Skip to main content](https://blog.teamascend.com/blog/business-email-compromise#main) [![cropped-Ascend-Technologies\_Vertical\_FullColor\_White](https://blog.teamascend.com/hs-fs/hubfs/Logos/cropped-Ascend-Technologies_Vertical_FullColor_White.png?width=150&height=118&name=cropped-Ascend-Technologies_Vertical_FullColor_White.png) ![cropped-Ascend-Technologies\_Vertical\_FullColor\_White](https://blog.teamascend.com/hs-fs/hubfs/Logos/cropped-Ascend-Technologies_Vertical_FullColor_White.png?width=150&height=118&name=cropped-Ascend-Technologies_Vertical_FullColor_White.png)](https://teamascend.com/) - [Show submenu for Services Services](http://teamascend.com/services/) - [Show submenu for IT Consulting IT Consulting](https://teamascend.com/services/strategic-consulting/) - [Healthcare Consulting](https://teamascend.com/services/healthcare/) - [Show submenu for Cybersecurity Cybersecurity](https://teamascend.com/services/cybersecurity/) - [Ascend Defend | Microsoft Security](https://teamascend.com/services/microsoft-365/microsoft-security-ascend-defend/) - [Managed Detection & Response](https://teamascend.com/services/cybersecurity/managed-detection-response/) - [Identity Protection & MFA](https://teamascend.com/services/cybersecurity/identity-protection-mfa/) - [Email Security](https://teamascend.com/services/cybersecurity/email-security/) - [Perimeter Security](https://teamascend.com/services/cybersecurity/perimeter-security-ngfw/) - [vCISO](https://teamascend.com/services/cybersecurity/vciso/) - [Security Risk Assessment](https://teamascend.com/services/it-assessments/security-risk-assessment/) - [Penetration Testing](https://teamascend.com/services/infrastructure/penetration-testing/) - [Vulnerability Management](https://teamascend.com/services/cybersecurity/vulnerability-management-program/) - [Security Awareness Training](https://teamascend.com/services/cybersecurity/security-awareness-program/) - [Show submenu for IT Infrastructure IT Infrastructure](https://teamascend.com/services/infrastructure/) - [24/7 Support Desk](https://teamascend.com/services/infrastructure/support-desk/) - [VCIO](https://teamascend.com/services/infrastructure/vcio/) - [Managed Infrastructure](https://teamascend.com/services/infrastructure/managed-infrastructure-services/) - [Data Protection (BaaS)](https://teamascend.com/services/infrastructure/data-protection/) - [Onsite Rounding](https://teamascend.com/services/infrastructure/onsite-rounding/) - [Application Administration Services](https://teamascend.com/services/infrastructure/application-administration/) - [IT Infrastructure Assessment](https://teamascend.com/services/it-assessments/infrastructure-assessment/) - [Product](https://teamascend.com/services/infrastructure/product/) - [Show submenu for Cloud Cloud](https://teamascend.com/services/cloud-computing/) - [Ascend Cloud | Managed Private Data Center](https://teamascend.com/services/cloud-computing/edafio-cloud/) - [Hybrid Cloud](https://teamascend.com/services/cloud-computing/hybrid-cloud-solutions/) - [Cloud Security (CSPM)](https://teamascend.com/services/cloud-computing/cloud-security-posture-management/) - [Cloud Assessment](https://teamascend.com/services/cloud-computing/cloud-assessment/) - [Digitial Workspace Deployment](https://teamascend.com/services/cloud-computing/digital-workspace-deployment/) - [Cloud Migration](https://teamascend.com/services/cloud-computing/cloud-migration/) - [Show submenu for Microsoft Services Microsoft Services](https://teamascend.com/services/microsoft-365/) - [Ascend Defend | Microsoft Security](https://teamascend.com/services/microsoft-365/microsoft-security-ascend-defend/) - [Microsoft 365 Copilot](https://teamascend.com/services/microsoft-365/microsoft-365-copilot/) - [Microsoft Licensing](https://teamascend.com/services/microsoft-365/microsoft-licensing/) - [Microsoft 365 Management](https://teamascend.com/services/microsoft-365/microsoft-365-management/) - [Microsoft 365 Migration](https://teamascend.com/services/microsoft-365/) - [Show submenu for Salesforce Salesforce](https://teamascend.com/salesforce-services/) - [Consulting Services](https://teamascend.com/salesforce-services/salesforce-consulting-services/) - [Implementation Services](https://teamascend.com/salesforce-services/salesforce-implementation-services/) - [Managed Services](https://teamascend.com/salesforce-services/salesforce-managed-services/) - [Embedded Experts](https://teamascend.com/salesforce-services/salesforce-embedded-experts/) - [Optimization Assessment](https://teamascend.com/salesforce-services/salesforce-optimization-assessment/) - [Salesforce AppExchange](https://teamascend.com/salesforce-services/salesforce-appexchange/) - [HubSpot Services](https://teamascend.com/services/hubspot-services/) - [App Development](https://teamascend.com/services/application-development/) - [Show submenu for Industries Industries](https://teamascend.com/industries/) - [Financial Services](https://teamascend.com/industries/financial-services/) - [Private Equity](https://teamascend.com/industries/private-equity/) - [Insurance](https://teamascend.com/industries/insurance/) - [Manufacturing](https://teamascend.com/industries/manufacturing/) - [Healthcare](https://teamascend.com/industries/healthcare/) - [Legal](https://teamascend.com/industries/legal/) - [Accounting](https://teamascend.com/industries/accounting/) - [Show submenu for Resources Resources](https://teamascend.com/resources/) - [Client Success Stories](https://teamascend.com/client-success-stories/) - [Events](https://teamascend.com/events/) - [Solutions-Focused PDFs](https://teamascend.com/resources/#solutions) - [Blog](https://blog.teamascend.com/) - [Webinars](https://teamascend.com/resources/?_resource_type=webinar) - [All Resources](https://teamascend.com/resources/) - Show submenu for Company Company - [About Ascend Technologies](https://teamascend.com/about/) - [Leadership Team](https://teamascend.com/about/team/) - [Partners With Us](https://teamascend.com/about/partner-with-us/) - [Awards & Recognitions](https://teamascend.com/about/awards/) - [Certifications](https://teamascend.com/about/certifications/) - [Careers](https://teamascend.com/careers/) - [Internships](https://teamascend.com/careers/internships/) - [Connect](https://teamascend.com/contact/) Open main navigation Close main navigation - Show submenu for Services Services - Services - [Services](http://teamascend.com/services/) - Show submenu for IT Consulting IT Consulting - IT Consulting - [IT Consulting](https://teamascend.com/services/strategic-consulting/) - [Healthcare Consulting](https://teamascend.com/services/healthcare/) - Show submenu for Cybersecurity Cybersecurity - Cybersecurity - [Cybersecurity](https://teamascend.com/services/cybersecurity/) - [Ascend Defend | Microsoft Security](https://teamascend.com/services/microsoft-365/microsoft-security-ascend-defend/) - [Managed Detection & Response](https://teamascend.com/services/cybersecurity/managed-detection-response/) - [Identity Protection & MFA](https://teamascend.com/services/cybersecurity/identity-protection-mfa/) - [Email Security](https://teamascend.com/services/cybersecurity/email-security/) - [Perimeter Security](https://teamascend.com/services/cybersecurity/perimeter-security-ngfw/) - [vCISO](https://teamascend.com/services/cybersecurity/vciso/) - [Security Risk Assessment](https://teamascend.com/services/it-assessments/security-risk-assessment/) - [Penetration Testing](https://teamascend.com/services/infrastructure/penetration-testing/) - [Vulnerability Management](https://teamascend.com/services/cybersecurity/vulnerability-management-program/) - [Security Awareness Training](https://teamascend.com/services/cybersecurity/security-awareness-program/) - Show submenu for IT Infrastructure IT Infrastructure - IT Infrastructure - [IT Infrastructure](https://teamascend.com/services/infrastructure/) - [24/7 Support Desk](https://teamascend.com/services/infrastructure/support-desk/) - [VCIO](https://teamascend.com/services/infrastructure/vcio/) - [Managed Infrastructure](https://teamascend.com/services/infrastructure/managed-infrastructure-services/) - [Data Protection (BaaS)](https://teamascend.com/services/infrastructure/data-protection/) - [Onsite Rounding](https://teamascend.com/services/infrastructure/onsite-rounding/) - [Application Administration Services](https://teamascend.com/services/infrastructure/application-administration/) - [IT Infrastructure Assessment](https://teamascend.com/services/it-assessments/infrastructure-assessment/) - [Product](https://teamascend.com/services/infrastructure/product/) - Show submenu for Cloud Cloud - Cloud - [Cloud](https://teamascend.com/services/cloud-computing/) - [Ascend Cloud | Managed Private Data Center](https://teamascend.com/services/cloud-computing/edafio-cloud/) - [Hybrid Cloud](https://teamascend.com/services/cloud-computing/hybrid-cloud-solutions/) - [Cloud Security (CSPM)](https://teamascend.com/services/cloud-computing/cloud-security-posture-management/) - [Cloud Assessment](https://teamascend.com/services/cloud-computing/cloud-assessment/) - [Digitial Workspace Deployment](https://teamascend.com/services/cloud-computing/digital-workspace-deployment/) - [Cloud Migration](https://teamascend.com/services/cloud-computing/cloud-migration/) - Show submenu for Microsoft Services Microsoft Services - Microsoft Services - [Microsoft Services](https://teamascend.com/services/microsoft-365/) - [Ascend Defend | Microsoft Security](https://teamascend.com/services/microsoft-365/microsoft-security-ascend-defend/) - [Microsoft 365 Copilot](https://teamascend.com/services/microsoft-365/microsoft-365-copilot/) - [Microsoft Licensing](https://teamascend.com/services/microsoft-365/microsoft-licensing/) - [Microsoft 365 Management](https://teamascend.com/services/microsoft-365/microsoft-365-management/) - [Microsoft 365 Migration](https://teamascend.com/services/microsoft-365/) - Show submenu for Salesforce Salesforce - Salesforce - [Salesforce](https://teamascend.com/salesforce-services/) - [Consulting Services](https://teamascend.com/salesforce-services/salesforce-consulting-services/) - [Implementation Services](https://teamascend.com/salesforce-services/salesforce-implementation-services/) - [Managed Services](https://teamascend.com/salesforce-services/salesforce-managed-services/) - [Embedded Experts](https://teamascend.com/salesforce-services/salesforce-embedded-experts/) - [Optimization Assessment](https://teamascend.com/salesforce-services/salesforce-optimization-assessment/) - [Salesforce AppExchange](https://teamascend.com/salesforce-services/salesforce-appexchange/) - [HubSpot Services](https://teamascend.com/services/hubspot-services/) - [App Development](https://teamascend.com/services/application-development/) - Show submenu for Industries Industries - Industries - [Industries](https://teamascend.com/industries/) - [Financial Services](https://teamascend.com/industries/financial-services/) - [Private Equity](https://teamascend.com/industries/private-equity/) - [Insurance](https://teamascend.com/industries/insurance/) - [Manufacturing](https://teamascend.com/industries/manufacturing/) - [Healthcare](https://teamascend.com/industries/healthcare/) - [Legal](https://teamascend.com/industries/legal/) - [Accounting](https://teamascend.com/industries/accounting/) - Show submenu for Resources Resources - Resources - [Resources](https://teamascend.com/resources/) - [Client Success Stories](https://teamascend.com/client-success-stories/) - [Events](https://teamascend.com/events/) - [Solutions-Focused PDFs](https://teamascend.com/resources/#solutions) - [Blog](https://blog.teamascend.com/) - [Webinars](https://teamascend.com/resources/?_resource_type=webinar) - [All Resources](https://teamascend.com/resources/) - Show submenu for Company Company - Company - [About Ascend Technologies](https://teamascend.com/about/) - [Leadership Team](https://teamascend.com/about/team/) - [Partners With Us](https://teamascend.com/about/partner-with-us/) - [Awards & Recognitions](https://teamascend.com/about/awards/) - [Certifications](https://teamascend.com/about/certifications/) - [Careers](https://teamascend.com/careers/) - [Internships](https://teamascend.com/careers/internships/) - [Connect](https://teamascend.com/contact/) - [24/7 Client Services](https://portal-ascend.okta.com/) [24/7 Client Services](https://portal-ascend.okta.com/) Phishing and Security Awareness, Alerts # Business Email Compromise: What is it, and How Can it Affect Me? ![Default Author](https://blog.teamascend.com/hubfs/Logos/Ascend/Ascend%20Technologies_Vertical_Blue.png) TEAM ASCEND August 10, 2018 - [![LinkedIn](https://blog.teamascend.com/hubfs/LinkedIn-color%20(1).svg)](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fblog.teamascend.com%2Fblog%2Fbusiness-email-compromise) - [![Facebook](https://blog.teamascend.com/hubfs/Group%203%20(1).svg)](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fblog.teamascend.com%2Fblog%2Fbusiness-email-compromise) - [![Email](https://blog.teamascend.com/hubfs/Group%20427320686.svg)](mailto:?subject=%3Cspan+id%3D%22hs_cos_wrapper_name%22+class%3D%22hs_cos_wrapper+hs_cos_wrapper_meta_field+hs_cos_wrapper_type_text%22+style%3D%22%22+data-hs-cos-general-type%3D%22meta_field%22+data-hs-cos-type%3D%22text%22+%3EBusiness+Email+Compromise%3A+What+is+it%2C+and+How+Can+it+Affect+Me%3F%3C%2Fspan%3E&body=https%3A%2F%2Fblog.teamascend.com%2Fblog%2Fbusiness-email-compromise) ![](https://blog.teamascend.com/hubfs/Blog%20Feature%20Images/081018_BEC.jpg)  You may have heard the statistic: *90% of breaches* start with email. But you’re probably thinking, *that won’t happen to me*.  You know the *[signs of a phishing email](https://blog.teamascend.com/7-signs-of-a-phishing-email)* and you avoid emails that are clearly unsafe, so you’re not going to be the one who gets breached, right? What you may not already know is there’s another type of phishing that’s harder to spot… and it’s very likely you’ll run into it at some point this year if you haven't already. In 2023, the volume of nefarious emails impersonating enterprises reached a staggering crescendo, with attacks such as BEC making up 99% of reported threats. According to the [FBI](https://www.ic3.gov/Media/Y2023/PSA230609), $17.3 billion in exposed losses of U.S. victims between 2013 and 2022 were the result of BEC attacks. ## **So what is BEC?** It’s a type of email attack that relies on the art of deception, but unlike regular phishing attacks, it uses a higher level of sophistication. In the case of BEC, the attacker doesn’t just emulate any brand or company in an attempt to get you to click–they do careful research and use that knowledge to impersonate a company executive, trusted brand, or partner. BEC attacks can use a variety of deceptive techniques, including display name deception, domain spoofing, and lookalike domains.  The attackers will do whatever it takes to provide you with a sense of familiarity and trust, in hopes that you won’t be suspicious of what they’re asking. There are many common examples like getting an email from HR@yourcompany.com asking you to update your W4 using the attached document. This may seem legitimate until you realize the HR department’s emails usually come through as humanresources@yourcompany.com or directly from a specific employee. If you’re not careful, you could have just handed over your social security number to an attacker! BEC scams can also impersonate your CEO (as in the example below) or a familiar coworker asking for some type of sensitive information, document, or something else of value. These attacks differ from traditional phishing because there is not often a malicious link or document attached to the email. Instead, the attacker will use pure social engineering to get *you* to hand the information over. In fact, it happened to one of our employees. She received an email to their personal email account from our CEO (we'll call him Michael Scott)…or at least that’s what they wanted her to think.   Here’s the message: ![Crafty spear phishing email pretends to be company CEO asking for assistance](https://blog.teamascend.com/hs-fs/hubfs/Spear-Phishing-BEC-Email_NoDetails-400x250.png?width=525&name=Spear-Phishing-BEC-Email_NoDetails-400x250.png) This doesn’t seem too phishy, right? It’s just an email from your boss asking for help with something. There aren’t even any links. Seems safe…. Until you look at the details and pay attention to the urgency you realize the following are red flags: ![Spear phishing email pretending to be CEO is from an illegitimate email address](https://blog.teamascend.com/hs-fs/hubfs/Spear-Phishing-BEC-Email.png?width=500&height=405&name=Spear-Phishing-BEC-Email.png)   *Always check the details!*   ## **How do you protect yourself or your company?** In addition to looking for the [basic signs of phishing](https://blog.teamascend.com/7-signs-of-a-phishing-email), watch out for these red flags: ### Lookalike domains and display names For example, keep an eye out for hyphens/dashes and periods where they don’t belong. If your domain is @abccompany.com, an address at @abc-company.com might look familiar at first, but a closer look will reveal that it is illegitimate. There is also a similar issue with display names: it may say an email is coming from your CEO (like the example above) or your bank, but be sure to check the sender’s full email address for signs of compromise. ### Uncommon Requests Didn’t you just update your W4 or verify your W2? Does this invoice match recent company activity? Does your boss or coworker frequently request financial transfers or valuable personal information? These are questions to ask before you click, respond, or provide any data via email. If you’re unsure or if something seems suspicious, try contacting the sender in person or over the phone. If it’s a coworker, head to their desk or call up their office phone to verify the request. If it’s a corresponding company, look up their contact information online and give them a call. Being extra cautious about handing out sensitive information could mean the difference between preventing a huge loss and falling victim to a BEC attack. Education is key when it comes to spotting malicious emails. Every single employee is susceptible to phishing emails and it only takes* one* person to click or respond to potentially cause a breach. At [Ascend](https://teamascend.com/), we offer [Phishing and Security Awareness Training.](https://teamascend.com/managed-security/email-security/phishing-security-awareness/) We send your users crafted phishing emails at random intervals over a determined period of time. No rickrolling here: if the phishing link is clicked in the email, the user is enrolled in security training modules that teach them what they did wrong. After the baseline testing is done, you will be able to see your company’s phish prone rate decrease as the testing continues.   Your company is at risk and it’s important that you don’t wait to take the next steps. [Contact us today!](https://teamascend.com/about-us/contact/)   [![Email Security: Prevent your email system from becoming a threat](https://no-cache.hubspot.com/cta/default/2733374/90aae4e9-ecef-406c-9511-287c121235cb.png)](https://cta-redirect.hubspot.com/cta/redirect/2733374/90aae4e9-ecef-406c-9511-287c121235cb)   ### Table of Contents #### Get Insights Sent to Your Inbox ## Related Articles ![How to Build an AI Governance Framework a Lean IT Team Can Run](https://blog.teamascend.com/hubfs/software-engineers-collaborating-on-code-in-office-2026-09-21-23-15-07-utc.jpg) Phishing and Security Awareness, Alerts ### [How to Build an AI Governance Framework a Lean IT Team Can Run](https://blog.teamascend.com/blog/ai-governance-framework-for-lean-it-teams-ascend) September 24, 2026 [Read Now ![arrow](https://blog.teamascend.com/hubfs/SVG%20(2).svg)](https://blog.teamascend.com/blog/ai-governance-framework-for-lean-it-teams-ascend) ![How to Choose the Right Salesforce Products for Your Business](https://blog.teamascend.com/hubfs/AdobeStock_1458786464.jpeg) Phishing and Security Awareness, Alerts ### [How to Choose the Right Salesforce Products for Your Business](https://blog.teamascend.com/blog/how-to-choose-the-right-salesforce-products-for-your-business) September 22, 2026 [Read Now ![arrow](https://blog.teamascend.com/hubfs/SVG%20(2).svg)](https://blog.teamascend.com/blog/how-to-choose-the-right-salesforce-products-for-your-business) ![What Is Shadow AI, and Why Is It a Compliance Risk Right Now?](https://blog.teamascend.com/hubfs/woman-working-from-home-at-desk-with-laptop-2026-03-13-01-57-07-utc.jpg) Phishing and Security Awareness, Alerts ### [What Is Shadow AI, and Why Is It a Compliance Risk Right Now?](https://blog.teamascend.com/blog/shadow-ai-compliance-risk-regulated-industries) September 17, 2026 [Read Now ![arrow](https://blog.teamascend.com/hubfs/SVG%20(2).svg)](https://blog.teamascend.com/blog/shadow-ai-compliance-risk-regulated-industries) [![Ascend Technologies](https://blog.teamascend.com/hs-fs/hubfs/Logos/Ascend/Ascend%20Technologies_Horizontal_FullColor_White.png?width=200&height=107&name=Ascend%20Technologies_Horizontal_FullColor_White.png)](https://teamascend.com/) Contact 833-639-2285 - - - - - - Company - [About](https://teamascend.com/about/) - [Services](https://teamascend.com/services/) - [Testimonials](https://teamascend.com/client-success-stories/) - [Partner With Us](https://teamascend.com/about/partner-with-us/) - [Resources](https://teamascend.com/resources/) - [Contact](https://teamascend.com/contact/) - [Careers](https://teamascend.com/careers/) - Services - [IT Consulting](https://teamascend.com/services/strategic-consulting/) - [Cybersecurity](https://teamascend.com/services/cybersecurity/) - [IT Infrastructure](https://teamascend.com/services/infrastructure/) - [Cloud](https://teamascend.com/services/cloud-computing/) - [24/7 Support Desk](https://teamascend.com/services/infrastructure/support-desk/) - [Microsoft Services](https://teamascend.com/services/microsoft-365/) - [Salesforce Services](https://teamascend.com/salesforce-services/) - [HubSpot Services](https://teamascend.com/services/hubspot-services/) - [App Development](https://teamascend.com/services/application-development/) ### Empowering Technology. Powered by People. Technology is critical to businesses across all industries. Today's technology must be smart, reliable, adaptable, and secure. At Ascend Technologies, we deliver solutions at the highest level, from cloud computing to proactive cybersecurity strategies to Salesforce excellence. And the team? As impressive as the tech. Our practical support is focused on one thing: your success. Let's see what we can do together. [Contact Us](https://teamascend.com/contact/) ©2026 Ascend Technologies, LLC, All Rights Reserved | [Privacy Policy](https://teamascend.com/privacy-policy/) ```json { "@context" : "https://schema.org", "@type" : "WebPage", "breadcrumb" : { "@type" : "BreadcrumbList", "itemListElement" : [ { "@type" : "ListItem", "item" : "https://blog.teamascend.com", "name" : "Home", "position" : 1 } ] }, "dateModified" : "2024-01-29T16🇲🇲49", "description" : "You may have heard the statistic: 90% of breaches start with email. You may be thinking you’re not going to be the one who gets breached... Or are you?", "name" : "Business Email Compromise: What is it, and How Can it Affect Me?", "primaryImageOfPage" : { "@type" : "ImageObject", "url" : "https://cdn2.hubspot.net/hubfs/2733374/Blog%20Feature%20Images/081018_BEC.jpg" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://content.teamascend.com/hubfs/Ascend-Technologies-HubSpot-Logo.png" }, "name" : "Ascend Technologies", "url" : "https://blog.teamascend.com" }, "url" : "https://blog.teamascend.com/blog/business-email-compromise" } ```