This is the fifth chapter in the Little Black Book of Scams.
Your CEO is asking for money urgently; make sure the email is legitimate.
Do you work in accounting or finance? Do you have the authority to move money at work? Do you report to a chief executive officer (CEO)?
If yes, be on the lookout; this scam specifically targets you.
In a typical “CEO scam,” fraudsters will impersonate a senior company executive, either by gaining access to their email address or by imitating one.
They will send realistic-looking emails that try to trick you into sending money to a third party.
The emails will make the request sound urgent and confidential. For example, they may say the money is needed to secure an important contract, complete a confidential transaction, or update a supplier’s payment information.
Fraudsters are usually strategic about the timing of these emails. They send them when executives are away or hard to reach.
This lucrative scam can cost businesses tens of thousands to millions of dollars.
BEC scams are a growing global threat that targets small local businesses and large corporations alike.
Tips to protect yourself
✔ Keep your computer systems secure with an up-to-date, reputable antivirus software and strong passwords.
✔ Validate all transfer requests either on the phone or in person. Never use the contact information provided in emails.
✔ Verify the sender’s email address—scammers will often create addresses that are very similar to legitimate ones, with just one or two different letters.
✔ Encourage your company to create a standard process for money transfers that requires multiple levels of approvals.
✔ Limit the details you share publicly. Fraudsters use information that’s available online and on social media to find potential victims and to time their fraud.
Always report all scams.
*The full booklet is here. This chapter is re-posted with permission. You can also watch a video interview with the Commission for Financial Capability's fraud education manager Bronwyn Groot here.
We welcome your comments below. If you are not already registered, please register to comment
Remember we welcome robust, respectful and insightful debate. We don't welcome abusive or defamatory comments and will de-register those repeatedly making such comments. Our current comment policy is here.