Sectors

Construction & Engineering

Documented social engineering incidents targeting the construction & engineering sector, sourced and fact-checked.


7 Cases
Documented

Tecnimont SpA (India) $18.6M BEC / CEO Fraud with Staged Fake Conference Calls

Fraudsters posing as Tecnimont's group CEO, other executives, and a fictitious Swiss lawyer used spoofed emails and a staged series of conference calls about a fake confidential China acquisition to talk the Indian subsidiary's head into wiring $18.6 million to Hong Kong accounts in November 2018.

Incident 2018Read →
Documented

South Carolina BEC ring: 12 indicted, $25M+ stolen (2020 to 2024)

A 12-person ring watched hacked inboxes for big payments, then redirected them with fake emails. Trial evidence put losses above $25M. Nine now convicted.

Incident 2020Read →
Documented

Pine Bluff School District's $3.2M BEC: one extra letter in a domain (2025)

Scammers hijacked a real invoice thread with a lookalike domain and got an Arkansas school district to wire $3.2M. $1.1M recovered. How the thread hijack worked.

Incident 2025Read →
Documented

Okunnu BEC / Money-Mule Ring: Invoice-Redirect Fraud Across Four Companies and One NJ Township

A Houston- and California-based ring spoofed or compromised business emails to trick four companies and one New Jersey township into wiring over $2.5 million meant for real creditors into shell-company "money mule" accounts, which the defendants then laundered through layers of bank transfers; a mule-account operator drew the case's longest sentence in July 2025, months before two more defendants were sentenced in February 2026.

Incident 2021Read →
Documented

Cabarrus County $1.7M vendor-impersonation BEC (2019)

Scammers impersonating a school construction contractor submitted a bank-account-change request with seemingly valid documentation, and Cabarrus County, NC wired $2.5M to the fraud account, resulting in a reported $1.73M net loss.

Incident 2018Read →
Documented

Arup's $25.6M deepfake video call fraud (2024)

An Arup employee in Hong Kong sent HK$200M (US$25.6M) after a video call where everyone else was a deepfake. How the fake meeting worked and what stops it.

Incident 2024Read →
Documented

Argan, Inc. Fraudulently Induced Wire Transfers (2023)

Argan's Fiscal 2024 cybersecurity disclosure described fraudulently induced outbound wire transfers in March 2023 and reported $2.7 million of loss, net of recovered funds and including related professional fees.

Incident 2023Read →
Explore more

Browse the rest of the library