Skip to content

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Business Email Compromise (BEC)

What is BEC?

Business Email Compromise (BEC) is a sophisticated scam targeting both businesses and individuals performing a transfer of funds. The scam is frequently carried out when a subject compromises legitimate business e-mail accounts through social engineering or computer intrusion techniques resulting in an unauthorized transfer of funds.

Stay Protected

To remain on guard against BEC, follow the tips below:

  • Use secondary channels or two-factor authentication to verify requests for changes in account information with the intended recipient.
  • Verify the email address used to send emails, especially when using a mobile or handheld device, by ensuring the sender's address appears to match who it is coming from.
  • Ensure the settings in yours or your employees' computers are enabled to allow full email extensions to be viewed.
  • Monitor your personal financial accounts on a regular basis for irregularities, such as missing deposits.

What To Do In Case Of A BEC Incident

  1. Contact Your Bank

    Contact the originating Financial Institution as soon as fraud is recognized to request a recall or reversal as well as a Hold Harmless Letter or Letter of Indemnity.

  2. File an Emergency Complaint with IC3

    File a detailed complaint at ic3.gov immediately. Provide complete wire transfer routing details (SWIFT/BIC, ABA routing number, account numbers, timestamps, and reference IDs) to enable the FBI Recovery Asset Team (RAT) to activate the Financial Fraud Kill Chain (FFKC) and request an emergency hold on the destination bank account.

  3. Notify Local FBI Field Office

    In addition to filing online, notify the Cyber Task Force at your local FBI Field Office for manual escalation if the fraudulent wire transfer volume is exceptionally large.

  4. Stay Informed

    Visit the FBI IC3 Recovery Asset Team Report to learn more about the Financial Fraud Kill Chain workflow, threat vectors, success rates, and incident response best practices.

Terms and Conditions

Prior to filing a complaint with the IC3, please read the following information regarding terms and conditions.

Should you have additional questions prior to filing your complaint, view FAQ for more information on inquiries such as:

  • What details will I be asked to include in my complaint?
  • What happens after I file a complaint?
  • How are complaints resolved?
  • Should I retain evidence related to my complaint?

Complaints filed via this website are analyzed and may be referred to federal, state, local or international law enforcement and partner agencies for possible investigation.

The complaint information you submit to this site is encrypted via secure socket layer (SSL) encryption. Please see the Privacy Policy for further information.

We thank you for your cooperation.

By clicking "I Accept" you acknowledge the following:

I understand any contact or investigation regarding any complaint I file on this website is initiated at the discretion of the agency receiving the complaint information. I will not be contacted by the IC3.

The information I'm providing on this form is correct to the best of my knowledge. I understand that providing false information could make me subject to fine, imprisonment, or both. (TITLE 18, U.S. CODE, SECTION 1001)