Email5 min read

Business email compromise (BEC) — what to know

Name: MrTech Melbourne
Address: Melbourne, VIC, AU
Telephone: +61-1300-191-024
Price range: $$

Invoice fraud, payroll redirection, and fake CEO requests — how Melbourne businesses reduce BEC risk.

By MrTech MelbournePublished 14 June 2026Updated 4 June 2026

What BEC looks like

Attackers impersonate executives, suppliers, or staff via look-alike domains, compromised inboxes, or spoofed From addresses. Common asks: change bank details on an invoice, buy gift cards urgently, or approve a wire transfer.

Technical layers

Enforce DMARC with quarantine or reject, enable DKIM, train staff on external sender banners, and flag payments-related keywords. Conditional access and MFA stop many account takeovers that fuel BEC.

Process beats panic

Verify payment changes on a known phone number — not numbers in the email. Dual approval for transfers over a threshold. Separate duties between who requests and who approves payments.

If you are targeted

Isolate affected accounts, reset passwords, preserve headers, report to your bank immediately, and review mail forwarding rules attackers often add. Run authentication and blacklist checks to see if the domain is abused broadly.

Try it now