A BEC attack occurs when a cybercriminal pretends to be someone the recipient trusts, such as a company director, supplier, customer or colleague. The attacker uses this trust to convince the victim to take a specific action.

Unlike many cyber attacks, BEC scams often don't rely on malicious attachments or links. Instead, they use social engineering and deception to manipulate people into making mistakes.