BEC is an email that looks like it's from your CEO, your vendor, or your law firm, asking you to move money or change payment details, that's it.
sometimes the account really is compromised. Most times it's a lookalike domain, one character off or a spoofed display name that your inbox renders as trustworthy because it says "CEO" next to a name you recognize.
BEC generated $3.046 billion in reported losses in 2025, from 24,768 complaints the second-highest loss category behind investment fraud, ahead of ransomware, ahead of data breaches, ahead of almost everything that makes headlines.
A well-timed email and someone in accounts who trusted the name in the from field.