Executive and payment fraud

CEO fraud vs BEC: what is the difference?

Business email compromise is the broad category: any attack that uses a trusted business email identity to move money or data. CEO fraud is one variety of it, where the impersonated identity is a senior executive. CEO fraud is a subset of BEC, not an alternative to it.

The distinction matters for defence. If you only train staff to distrust emails from the chief executive, you miss vendor impersonation, payroll diversion and legal-counsel pretexts, which are all BEC and none of them CEO fraud.

Documented cases

  • CEO fraud: Pathé paid EUR 19.2 million to people posing as head-office leadership.
  • Vendor-style BEC: Johnson County Schools was targeted through a supplier relationship, with no executive involved.
  • Mailbox-takeover BEC: Unatrac lost $11 million after the CFO real account was compromised.

The control that breaks it

  • Build the control around the payment event, not the sender job title.
  • Apply callback verification to vendor changes and executive requests alike.
  • Train on the full pattern set: supplier, payroll, legal and executive pretexts.

Related: how to prevent CEO fraud · invoice fraud vs BEC · Business email compromise

Related
Business email compromise cases → Whaling vs spear phishing: what is the difference? How do you prevent business email compromise? How do you verify a wire transfer request?