{"id":1584,"date":"2022-02-01T21:58:16","date_gmt":"2022-02-01T21:58:16","guid":{"rendered":"https:\/\/rethinkq.adp.com\/?p=1584"},"modified":"2024-09-03T21:26:58","modified_gmt":"2024-09-03T20:26:58","slug":"bec-scams-billions","status":"publish","type":"post","link":"https:\/\/rethinkq.adp.com\/bec-scams-billions\/","title":{"rendered":"The email scam costing businesses billions"},"content":{"rendered":"\n<header class=\"entry-header bg-adp-tan block--article-header alignfull block--article-header\" >\n\n  \n\n<figure class=\"wp-block-image size-large entry--image\"><img decoding=\"async\" width=\"1024\" height=\"691\" src=\"https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-3-1024x691.png\" alt=\"\" class=\"wp-image-1585\" srcset=\"https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-3-1024x691.png 1024w, https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-3-300x202.png 300w, https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-3-768x518.png 768w, https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-3-1600x1079.png 1600w, https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-3-1536x1036.png 1536w, https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-3.png 1853w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">FBI<\/figcaption><\/figure>\n\n\n\n<div class=\"wp-block-group entry--title-wrapper\"><div class=\"wp-block-group__inner-container is-layout-flow wp-block-group-is-layout-flow\"><div class=\"entry--social-share\">\n  <ul>\n    <li><a href=\"https:\/\/www.facebook.com\/sharer\/sharer.php?u=https:\/\/rethinkq.adp.com\/bec-scams-billions\/&#038;t=The email scam costing businesses billions\" target=\"_blank\"><img decoding=\"async\" src=\"https:\/\/rethinkq.adp.com\/wp-content\/themes\/rethink-quarterly\/img\/facebook.svg\" alt=\"Facebook logo - click to share this article on Facebook\"><\/a><\/li>\n    <li><a href=\"http:\/\/twitter.com\/share?text=The email scam costing businesses billions&#038;url=https:\/\/rethinkq.adp.com\/bec-scams-billions\/\" target=\"_blank\"><img decoding=\"async\" src=\"https:\/\/rethinkq.adp.com\/wp-content\/themes\/rethink-quarterly\/img\/twitter.svg\" alt=\"Twitter logo - click to share this article on Twitter\"><\/a><\/li>\n    <li><a href=\"https:\/\/www.linkedin.com\/sharing\/share-offsite\/?url=https%3A%2F%2Frethinkq.adp.com%2Fbec-scams-billions%2F\" target=\"_blank\"><img decoding=\"async\" src=\"https:\/\/rethinkq.adp.com\/wp-content\/themes\/rethink-quarterly\/img\/linkedin.svg\" alt=\"LinkedIn logo - click to share this article on Facebook\"><\/a><\/li>\n  <\/ul>\n<\/div>\n\n            <a class=\"entry--tag tag-style\" href=\"https:\/\/rethinkq.adp.com\/time-for-universal-basic-income\/\">Features<\/a>\n\n        \n  <h1 class=\"entry-title\">The email scam costing businesses billions<\/h1>\n\n\n<p class=\"is-style-summary-style\">Criminals use simple emails to trick companies into diverting payments to untraceable accounts.<\/p>\n<\/div><\/div>\n\n\n  <div class=\"entry--meta content-width\">\n           <p class=\"authors\">By\n                        <a href=\"https:\/\/rethinkq.adp.com\/author\/amit-roy-choudhury\/\">Amit Roy Choudhury<\/a>\n\n             \n         \n     <\/p>\n    \n  \n  <p>1 February 2022  <span class=\"desktop-only\">\u2014<\/span> <a href=\"https:\/\/rethinkq.adp.com\/issue-4-security\/\">Issue 4: Security<\/a> \n  <\/div><!-- .entry-meta -->\n\n<\/header><!-- .entry-header -->\n\t<div class=\"entry-content content-width\">\n\n\n\n<p>In 2019, a senior account specialist working for the city government in Ocala, Florida, received an email purportedly from a construction company doing work on the city\u2019s new airport terminal. The sender asked Ocala\u2019s finance department to update the company\u2019s banking information; soon after, the city received a follow-up email with an <a href=\"https:\/\/securityaffairs.co\/wordpress\/93401\/cyber-crime\/ocala-city-bec-attack.html\" target=\"_blank\" rel=\"noreferrer noopener\">invoice<\/a> for $742,000. The city made the payment to the new bank account the next day.&nbsp;<\/p>\n\n\n\n<p>But a few days later, the construction company sent an email saying it hadn\u2019t received payment for work done. Upon closer examination, the email requesting Ocala update the company\u2019s payment information had come from a domain name with \u201cconstructions.com\u201d plural instead of the singular \u201cconstruction.com.\u201d&nbsp;<\/p>\n\n\n\n<p>The real construction company had not requested the change in banking details.&nbsp;The city of Ocala had become the victim of a business email compromise (BEC) scam.<\/p>\n\n\n\n<p>Prevalent even before the pandemic, these types of phishing attacks have <a href=\"https:\/\/phishinsight.trendmicro.com\/index.html?gclid=CjwKCAiA-9uNBhBTEiwAN3IlNLnb1ilnm8AH7d4e76OFCLABcbnMKEfbDyegB9aQ5b2DIHstK0q3ERoC-RQQAvD_BwE\" target=\"_blank\" rel=\"noreferrer noopener\">increased<\/a> over the past two years of remote working. Also called <a href=\"https:\/\/www.ncsc.gov.uk\/guidance\/whaling-how-it-works-and-what-your-organisation-can-do-about-it\" target=\"_blank\" rel=\"noreferrer noopener\">whaling<\/a>, BECs are low-tech but highly efficient, costing organizations billions of dollars each year.&nbsp;<\/p>\n\n\n\n<p>Chris Connell, managing director of Kaspersky Asia Pacific, notes that the reason why BEC scams are so dangerous is that scammers use social engineering rather than viruses or sophisticated hacking tools that are more easily detected.&nbsp;<\/p>\n\n\n\n<p>\u201cA scammer poses as a legitimate business contact, tricking the recipient into providing sensitive information or updating financial information to divert a payment,\u201d Connell says. \u201cAn initial contact might be unobtrusive, but [it] paves the way for bad actors to launch an attack against a higher-ranking employee of the company.\u201d&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How it works<\/h2>\n\n\n\n<p>Often the scammers send emails to HR and payroll departments posing as employees or suppliers requesting changes to their direct deposit data. Other times, the scammer poses as HR or a payroll provider and sends an employee a fake payment portal page. The employee enters his or her login information, which the scammer uses to access the real payment site and change the employee\u2019s banking data.&nbsp;<\/p>\n\n\n\n<p>In April 2020, the FBI warned that fraudsters would try to take advantage of the \u201cuncertainty surrounding the Covid-19 pandemic\u201d with business scams. Their prediction came true: The number of internet fraud complaints filed with the FBI jumped to 791,790 in 2020, an increase of 69% from the previous year, with total losses exceeding <a href=\"https:\/\/www.ic3.gov\/Home\/AnnualReports\" target=\"_blank\" rel=\"noreferrer noopener\">$4.1 billion<\/a>.&nbsp;Losses from BEC and email account compromise (EAC) incidents specifically increased from $1.3 billion in 2019 to $1.8 billion in 2020. This implies that BEC tactics have become more refined, and hackers are targeting larger organizations.&nbsp;<\/p>\n\n\n\n<p>David Ng, Singapore manager of cybersecurity company Trend Micro, notes that despite being a relatively low-tech method of hacking, BEC can be trickier to detect. \u201cSince BEC attacks do not normally use malicious attachments or URLs, they can evade traditional security solutions that only look into suspicious content and behavior,\u201d he says.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-pullquote\"><blockquote><p>The FBI reported a 69% increase in internet fraud complaints in 2020.<\/p><\/blockquote><\/figure>\n\n\n\n<p>Even the world\u2019s biggest technology companies have fallen victim to BEC attacks. From 2013 to 2015, a <a href=\"https:\/\/www.cyberscoop.com\/facebook-google-scam-man-sentenced\/\" target=\"_blank\" rel=\"noreferrer noopener\">scammer<\/a> in Lithuania posed as a Taiwan-based hardware company that supplies equipment to Google and Facebook. By sending false invoices and contracts, the scammer managed to fraudulently bill the companies more than $120 million before being caught and prosecuted in 2017.&nbsp;<\/p>\n\n\n\n<p>Smaller companies and organizations also routinely fall victim to BEC scams, with many of the cases never reported, according to the FBI. That could be because the process of recovering the stolen money may appear daunting to many smaller companies, or because the cost of doing so seems to outweigh the loss.&nbsp;<\/p>\n\n\n\n<p>For example, in one case a scammer in Singapore convinced an employee of an organization to buy iTunes cards, according to Ng at Trend Micro. After a round of emails on the subject, in which the \u201cmanager\u201d conveyed a sense of urgency, the employee went out and bought 20 iTunes cards worth 2,000 Singaporean dollars, then took photos of the scratch-off code on each card and sent them via email. Only later did it become clear the real manager didn\u2019t know anything about the request.<\/p>\n\n\n\n<p>For scammers, these smaller amounts can add up to millions of dollars, says Mike Opacity, senior director of Threat Monitoring at ADP. The company\u2019s fraud unit helps protect both ADP and its clients from internet scammers, who have only gotten more skilled. \u201cThe people we see engaged in this kind of activity, that\u2019s their profession,\u201d Opacity says.<\/p>\n\n\n<div class=\"block--sidebar bg-adp-purple alignwide\"><div class=\"block--sidebar__inner\">\n\n<h2 class=\"wp-block-heading\">5 types of BEC scams<\/h2>\n\n\n\n<p>The FBI has classified five types of business email compromise scams:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Bogus invoice scheme:<\/strong> Attackers pretending to be foreign suppliers request payment, redirecting the funds to their own account.\u00a0<\/li>\n\n\n\n<li><strong>CEO fraud:<\/strong> Attackers pose as the company CEO or an executive and send an email to an employee in finance, requesting them to transfer money to the account they control.<\/li>\n\n\n\n<li><strong>Account compromise:<\/strong> Attackers hack an executive or employee\u2019s email account and request invoice payments from their email contacts.<\/li>\n\n\n\n<li><strong>Attorney impersonation:<\/strong> Attackers posing as employees of a law firm make requests for information via email or phone, usually at the end of the business day.<\/li>\n\n\n\n<li><strong>Data theft:<\/strong> Attackers target employees in HR and accounting to obtain personally identifiable information or tax statements of employees that can be used for future attacks.<\/li>\n<\/ul>\n\n<\/div><\/div>\n\n\n<h2 class=\"wp-block-heading\">Emboldened scammers<\/h2>\n\n\n\n<p>The rise of remote working during the pandemic has revealed many new challenges for business security. People working from home might be using personal devices that are shared with other family members, which creates network vulnerability. And despite their best efforts to be vigilant, most people\u2019s behavior isn\u2019t exactly the same at home as when they\u2019re in the office.&nbsp;<\/p>\n\n\n\n<p>\u201cIn the office, it was easy to ask somebody if they sent something. Now it\u2019s more asynchronous,\u201d ADP\u2019s Opacity says. \u201cBecause of the way we\u2019re working during the pandemic, there\u2019s a slightly higher chance of success.\u201d<\/p>\n\n\n\n<p>Many scammers succeed by faking urgency, Opacity explains. They might forge an email from the CFO to HR asking for employees\u2019 tax forms, and in a rush to appease the executive, an unwitting employee sends the report.&nbsp;<\/p>\n\n\n\n<p>\u201cThe whole concept of social engineering is to get someone with access to buy into your story and instill a sense of panic, so they don\u2019t think twice about doing what you ask them to do,\u201d Opacity says.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-pullquote\"><blockquote><p>The whole concept of social engineering is to get someone with access to buy into your story and instill a sense of panic.<\/p><cite>Mike Opacity, ADP<\/cite><\/blockquote><\/figure>\n\n\n\n<p>As people have gotten busier and relied more on electronic communications \u2014 especially during the pandemic \u2014 they\u2019ve become less likely to pick up the phone and verify, he adds. In an office, you might pop over to the person\u2019s desk or dial their extension to confirm a request. That\u2019s more difficult when working remotely.<\/p>\n\n\n\n<p>In addition to instilling urgency, scammers often do a lot of research in the pre-attack phase to understand the target company and its leadership, says Ryan Flores, senior manager of APAC forward-looking threat research at Trend&nbsp;Micro.&nbsp;<\/p>\n\n\n\n<p>\u201cIn most cases, the information on the CEO and top executive are on the company websites, including email and phone number,\u201d Flores says. \u201cThis makes it easier for attackers to impersonate them and directly target people who report to these executives.\u201d&nbsp;<\/p>\n\n\n\n<p>BEC scammers also scan LinkedIn for CEO profiles of particularly profitable industries such as oil and gas or manufacturing to find potential targets.&nbsp;<\/p>\n\n\n\n<p>\u201cMore sophisticated BEC attackers sometimes send keyloggers into a company and learn about how it conducts business and what are the ongoing transactions so that they can insert themselves into these conversations,\u201d Flores says. \u201cThe availability of the information and investing in the preparatory phase before the actual BEC payment email \u2014 this is what makes them successful.\u201d<\/p>\n\n\n\n<figure class=\"wp-block-image alignwide size-large\"><img decoding=\"async\" width=\"1024\" height=\"681\" src=\"https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-2-1024x681.png\" alt=\"\" class=\"wp-image-1586\" srcset=\"https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-2-1024x681.png 1024w, https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-2-300x200.png 300w, https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-2-768x511.png 768w, https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-2-1600x1065.png 1600w, https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-2-1536x1022.png 1536w, https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-2-375x250.png 375w, https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-2.png 1984w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">FBI<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Crucial lines of defense<\/h2>\n\n\n\n<p>Companies can take precautions to protect against BECs, with employees representing a crucial line of defense. Since BEC is primarily based on social engineering, a well-established system of protocols that apply to all employees, from the CEO to the newest recruit, can help to mitigate risks.&nbsp;<\/p>\n\n\n\n<p>For example, instead of hitting \u201creply-to\u201d for emails related to financial information, workers should create a new email to the email directory, or follow up with a phone call, according to Opacity.&nbsp;<\/p>\n\n\n\n<p>Employees should also be careful about what they post on social media, says Timothy Ogden, vice president of Global Fraud Prevention and Financial Crimes at ADP.&nbsp;&nbsp;&nbsp;&nbsp;<\/p>\n\n\n\n<p>\u201cSharing things on social media can tell some crook that you\u2019re on vacation; the same is true of bank account or payroll account compromising,\u201d Ogden says.&nbsp;<\/p>\n\n\n<div class=\"block--sidebar bg-adp-purple alignwide\"><div class=\"block--sidebar__inner\">\n\n<h2 class=\"wp-block-heading\">How to avoid BEC scams<\/h2>\n\n\n\n<p>Trend Micro explains how to avoid falling victim to fraudulent payment requests:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Carefully assess the content of any email regarding payment, and pay special attention to the email address. Scammers often mimic legitimate email addresses by constructing an address that&#8217;s off by only one letter.\u00a0<\/li>\n\n\n\n<li>The company\u2019s spam filters should be tweaked to flag emails with addresses similar to the company\u2019s email as potentially fraudulent.<\/li>\n\n\n\n<li>Pay attention whether the request is consistent with the previous behavior in terms of timing, sender and recipient and the country of origin. Unusual language or a sense of undue urgency can be signs of a scam.<\/li>\n\n\n\n<li>Confirm requests through an established two-factor authentication system, such as following up with a phone call or a query in a company database.\u00a0<\/li>\n\n\n\n<li>Phone calls to verify a transaction should be made to previously known numbers, not the numbers indicated in the email request.<\/li>\n<\/ul>\n\n<\/div><\/div>\n\n\n<p>If your organization is hit by a scam, acting quickly can help mitigate the damage. For cases of fraud involving bank accounts within the U.S., the FBI can sometimes intercept payments before they\u2019re lost. In 2020, officials with the Recovery Asset Team were able to freeze $380 million in payments to scammers.&nbsp;<\/p>\n\n\n\n<p>ADP\u2019s security team helps clients who fall victim to BEC scams. That\u2019s in part because the scams are so common but so complex that they can overwhelm law enforcement.&nbsp;<\/p>\n\n\n\n<p>\u201cThe criminals are often out of jurisdiction. The FBI has so many incidents, they\u2019re probably working only on the biggest ones,\u201d Ogden says. \u201cWe tell the client, if you contact the police, please also send them our info.\u201d<\/p>\n\n\n\n<p class=\"is-style-default\">Ultimately, after the city of Ocala fell victim to a BEC scam, government officials undertook an extensive review of their internal policies to ensure that they would not repeat the experience. The senior account specialist resigned. <\/p>\n\n\n\n<p class=\"is-style-default\">But innovative BEC scammers are constantly coming up with <a href=\"https:\/\/www.wsj.com\/articles\/fraudsters-use-ai-to-mimic-ceos-voice-in-unusual-cybercrime-case-11567157402\" target=\"_blank\" rel=\"noreferrer noopener\">new ways<\/a> to access sensitive information. In addition to strict security processes, the most crucial tools to protect against scammers are knowledge and vigilance.<\/p>\n\n\n<div class=\"block--author\">      <div class=\"block-author__inner\">\n        <div class=\"author--image\">\n                      <a href=\"https:\/\/rethinkq.adp.com\/author\/amit-roy-choudhury\/\"><img decoding=\"async\" src=\"https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/profile_amit-roy-choudhury-298x305.jpg\" alt=\"\" \/><\/a>\n                  <\/div>\n        <div class=\"author--info\">\n                      <a href=\"https:\/\/rethinkq.adp.com\/author\/amit-roy-choudhury\/\" class=\"author--name\">Amit Roy Choudhury<\/a>\n\n          \n          <p><span style=\"font-weight: 400;\">Based in Singapore, Amit Roy Choudhury is a freelance journalist specialising in technology, finance, healthcare and the environment. He also runs a Singapore-based consultancy, Writerspace, which works with companies to create original thought-provoking content. Amit also does public speaking engagements on all things related to technology and moderates panel discussions. Previously, Amit was the Technology Editor of Singapore-based publication, The Business Times, and has held several editor\/editorial positions in various other media organizations in different countries.<\/span><\/p>\n          <div class=\"block--author-social\"><ul class=\"author--socials\"><li><a href=\"https:\/\/www.linkedin.com\/in\/indramit\" title=\"LinkedIn\" target=\"_blank\"><i class=\"fab fa-linkedin\"><\/i><\/a><\/li><\/ul><\/div>\n        <\/div>\n      <\/div>\n       <\/div>\n\n<div class=\"block--recommended-content alignwide is-style-bg-adp-tan\"><div class=\"block-recommended-content__inner\">\n\n<h2 class=\"wp-block-heading\">Read more<\/h2>\n\n\n<div class=\"block--article-pushpoint pushpoint__small\">      <div class=\"block-article-pushpoint__inner\">\n        <a href=\"https:\/\/rethinkq.adp.com\/practical-cybersecurity-tips-for-payroll-departments\/\">\n        <div class=\"pushpoint--image\">\n          <img decoding=\"async\" src=\"https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2023\/05\/hacker-working-on-laptop-at-night-hands-of-a-hacker-in-rubber-gloves-2HGHY2J-1084x576.jpg\" alt=\"\" \/>\n        <\/div>\n        <div class=\"pushpoint--info\">\n                    <span class=\"pushpoint--title\">Practical cybersecurity tips for payroll departments\u00a0<\/span>\n          <p>While prevention is the best medicine when it comes to cyberattacks, if your organization is targeted by criminals, you need to act fast.\n<\/p>        <\/div>\n      <\/a><\/div> <\/div>\n\n<div class=\"block--article-pushpoint pushpoint__small\">      <div class=\"block-article-pushpoint__inner\">\n        <a href=\"https:\/\/rethinkq.adp.com\/hr-approach-combat-job-scams\/\">\n        <div class=\"pushpoint--image\">\n          <img decoding=\"async\" src=\"https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2024\/05\/getty-images-SCP4REzRtrA-unsplash-1-1084x576.jpg\" alt=\"\" \/>\n        <\/div>\n        <div class=\"pushpoint--info\">\n                    <span class=\"pushpoint--title\">A proactive HR approach to combating job scams<\/span>\n          <p>Amid a cost-of-living crisis, desperate job seekers are falling victim to employment scams. Here\u2019s how HR and payroll can help protect their companies.<\/p>        <\/div>\n      <\/a><\/div> <\/div>\n\n<div class=\"block--article-pushpoint pushpoint__small\">      <div class=\"block-article-pushpoint__inner\">\n        <a href=\"https:\/\/rethinkq.adp.com\/volker-schrank-cybersecurity-mondelez\/\">\n        <div class=\"pushpoint--image\">\n          <img decoding=\"async\" src=\"https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/12\/Screen-Shot-2022-11-11-at-10_27_28-AM-1084x576.png\" alt=\"\" \/>\n        <\/div>\n        <div class=\"pushpoint--info\">\n                    <span class=\"pushpoint--title\">Volker Schrank on the importance of cybersecurity<\/span>\n          <p>Upgrading global payroll processes at Mondel\u0113z International was a big investment and a tough sell \u2014 until a ransomware attack changed everything.\n<\/p>        <\/div>\n      <\/a><\/div> <\/div>\n<\/div><\/div>\n\n\n<section class=\"wp-block-group alignfull section--sign-up has-background\" style=\"background-color:#7967ae\"><div class=\"wp-block-group__inner-container is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"has-text-align-center is-style-default has-white-color has-text-color has-large-font-size\"><a href=\"\/sign-up\/\">Sign up<\/a> to keep up to date with ReThink Q.<\/p>\n<\/div><\/section>\n","protected":false},"excerpt":{"rendered":"<p>Criminals use simple emails to trick companies into diverting payments to untraceable accounts.<\/p>\n","protected":false},"author":1,"featured_media":1585,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":true,"footnotes":""},"categories":[116],"tags":[183,181,179,180],"coauthors":[160],"class_list":["post-1584","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-features","tag-business-email-compromise","tag-crime","tag-cybersecurity","tag-scams","issue-issue-4-security"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>The email scam costing businesses billions - ADP ReThink Q<\/title>\n<meta name=\"description\" content=\"Criminals use simple emails to trick companies into diverting payments to untraceable accounts.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/rethinkq.adp.com\/bec-scams-billions\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The email scam costing businesses billions - ADP ReThink Q\" \/>\n<meta property=\"og:description\" content=\"Criminals use simple emails to trick companies into diverting payments to untraceable accounts.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/rethinkq.adp.com\/bec-scams-billions\/\" \/>\n<meta property=\"og:site_name\" content=\"ADP ReThink Q\" \/>\n<meta property=\"article:publisher\" content=\"Amit Roy Choudhury\" \/>\n<meta property=\"article:author\" content=\"https:\/\/rachel.codes\" \/>\n<meta property=\"article:published_time\" content=\"2022-02-01T21:58:16+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-09-03T20:26:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-3.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1853\" \/>\n\t<meta property=\"og:image:height\" content=\"1250\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Amit Roy Choudhury\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@rachelcodes\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Amit Roy Choudhury\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/rethinkq.adp.com\/bec-scams-billions\/\",\"url\":\"https:\/\/rethinkq.adp.com\/bec-scams-billions\/\",\"name\":\"The email scam costing businesses billions - ADP ReThink Q\",\"isPartOf\":{\"@id\":\"https:\/\/rethinkq.adp.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/rethinkq.adp.com\/bec-scams-billions\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/rethinkq.adp.com\/bec-scams-billions\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-3.png\",\"datePublished\":\"2022-02-01T21:58:16+00:00\",\"dateModified\":\"2024-09-03T20:26:58+00:00\",\"author\":{\"@id\":\"https:\/\/rethinkq.adp.com\/#\/schema\/person\/d0bb4ba3a0a65edfadebf728bbb547c1\"},\"description\":\"Criminals use simple emails to trick companies into diverting payments to untraceable accounts.\",\"breadcrumb\":{\"@id\":\"https:\/\/rethinkq.adp.com\/bec-scams-billions\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/rethinkq.adp.com\/bec-scams-billions\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/rethinkq.adp.com\/bec-scams-billions\/#primaryimage\",\"url\":\"https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-3.png\",\"contentUrl\":\"https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-3.png\",\"width\":1853,\"height\":1250},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/rethinkq.adp.com\/bec-scams-billions\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/rethinkq.adp.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The email scam costing businesses billions\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/rethinkq.adp.com\/#website\",\"url\":\"https:\/\/rethinkq.adp.com\/\",\"name\":\"ADP ReThink Q\",\"description\":\"Telling the human stories of payroll\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/rethinkq.adp.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/rethinkq.adp.com\/#\/schema\/person\/d0bb4ba3a0a65edfadebf728bbb547c1\",\"name\":\"rachel\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/rethinkq.adp.com\/#\/schema\/person\/image\/699e6af4e3ba3b377022a080054acf94\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8d89326a4b2185513249eaef9cb80ada89d65cf61b43b9868fcfa1be0f69530f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8d89326a4b2185513249eaef9cb80ada89d65cf61b43b9868fcfa1be0f69530f?s=96&d=mm&r=g\",\"caption\":\"rachel\"},\"sameAs\":[\"https:\/\/rethinkq.adp.com\",\"https:\/\/rachel.codes\",\"https:\/\/x.com\/rachelcodes\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The email scam costing businesses billions - ADP ReThink Q","description":"Criminals use simple emails to trick companies into diverting payments to untraceable accounts.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/rethinkq.adp.com\/bec-scams-billions\/","og_locale":"en_US","og_type":"article","og_title":"The email scam costing businesses billions - ADP ReThink Q","og_description":"Criminals use simple emails to trick companies into diverting payments to untraceable accounts.","og_url":"https:\/\/rethinkq.adp.com\/bec-scams-billions\/","og_site_name":"ADP ReThink Q","article_publisher":"Amit Roy Choudhury","article_author":"https:\/\/rachel.codes","article_published_time":"2022-02-01T21:58:16+00:00","article_modified_time":"2024-09-03T20:26:58+00:00","og_image":[{"width":1853,"height":1250,"url":"https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-3.png","type":"image\/png"}],"author":"Amit Roy Choudhury","twitter_card":"summary_large_image","twitter_creator":"@rachelcodes","twitter_misc":{"Written by":"Amit Roy Choudhury","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/rethinkq.adp.com\/bec-scams-billions\/","url":"https:\/\/rethinkq.adp.com\/bec-scams-billions\/","name":"The email scam costing businesses billions - ADP ReThink Q","isPartOf":{"@id":"https:\/\/rethinkq.adp.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/rethinkq.adp.com\/bec-scams-billions\/#primaryimage"},"image":{"@id":"https:\/\/rethinkq.adp.com\/bec-scams-billions\/#primaryimage"},"thumbnailUrl":"https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-3.png","datePublished":"2022-02-01T21:58:16+00:00","dateModified":"2024-09-03T20:26:58+00:00","author":{"@id":"https:\/\/rethinkq.adp.com\/#\/schema\/person\/d0bb4ba3a0a65edfadebf728bbb547c1"},"description":"Criminals use simple emails to trick companies into diverting payments to untraceable accounts.","breadcrumb":{"@id":"https:\/\/rethinkq.adp.com\/bec-scams-billions\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/rethinkq.adp.com\/bec-scams-billions\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/rethinkq.adp.com\/bec-scams-billions\/#primaryimage","url":"https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-3.png","contentUrl":"https:\/\/rethinkq.adp.com\/wp-content\/uploads\/2022\/01\/FBI-JCODE-Operations-3.png","width":1853,"height":1250},{"@type":"BreadcrumbList","@id":"https:\/\/rethinkq.adp.com\/bec-scams-billions\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/rethinkq.adp.com\/"},{"@type":"ListItem","position":2,"name":"The email scam costing businesses billions"}]},{"@type":"WebSite","@id":"https:\/\/rethinkq.adp.com\/#website","url":"https:\/\/rethinkq.adp.com\/","name":"ADP ReThink Q","description":"Telling the human stories of payroll","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/rethinkq.adp.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/rethinkq.adp.com\/#\/schema\/person\/d0bb4ba3a0a65edfadebf728bbb547c1","name":"rachel","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/rethinkq.adp.com\/#\/schema\/person\/image\/699e6af4e3ba3b377022a080054acf94","url":"https:\/\/secure.gravatar.com\/avatar\/8d89326a4b2185513249eaef9cb80ada89d65cf61b43b9868fcfa1be0f69530f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8d89326a4b2185513249eaef9cb80ada89d65cf61b43b9868fcfa1be0f69530f?s=96&d=mm&r=g","caption":"rachel"},"sameAs":["https:\/\/rethinkq.adp.com","https:\/\/rachel.codes","https:\/\/x.com\/rachelcodes"]}]}},"_links":{"self":[{"href":"https:\/\/rethinkq.adp.com\/wp-json\/wp\/v2\/posts\/1584","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rethinkq.adp.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rethinkq.adp.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rethinkq.adp.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rethinkq.adp.com\/wp-json\/wp\/v2\/comments?post=1584"}],"version-history":[{"count":0,"href":"https:\/\/rethinkq.adp.com\/wp-json\/wp\/v2\/posts\/1584\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/rethinkq.adp.com\/wp-json\/wp\/v2\/media\/1585"}],"wp:attachment":[{"href":"https:\/\/rethinkq.adp.com\/wp-json\/wp\/v2\/media?parent=1584"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rethinkq.adp.com\/wp-json\/wp\/v2\/categories?post=1584"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rethinkq.adp.com\/wp-json\/wp\/v2\/tags?post=1584"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/rethinkq.adp.com\/wp-json\/wp\/v2\/coauthors?post=1584"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}