02/06/2026
Business email compromise (BEC) is when scammers pretend to be someone you trust, like a company leader, co-worker, or supplier, using email. Their goal is to trick you into sending money or sharing personal information. This may occur through deceptive emails, fake invoices, or, in some cases, malicious links.
Scammers often
•Gain unauthorised access to, or spoof (fake), a legitimate email address
•Change banking details on invoices
•Pretend to be a senior leader requesting an urgent payment
•Impersonate suppliers demanding 'overdue' payments
•Pretend to be IT or administrative staff requesting password resets
•Fake invoices or payment requests - emails that appear to come from a known supplier, asking for payment to new or changed banking details
•Executive or authority impersonation - emails that seem to come from a senior manager or trusted authority, pressuring you to make urgent payments or transfers
•Fake emails from recruiters - emails offering job opportunities and asking for personal information or upfront fees
•Property or rental scams - scammers intercept emails between rental agents and tenants and send false banking details so rental payments are diverted
•Recurring unauthorised debit orders - scammers obtain banking details through deceptive emails and set up small recurring debit orders (from as little as R99) that may go unnoticed over time
How you can protect yourself
Pause when something feels urgent; think before acting
Always verify requests by phoning a trusted number you already have, not the one provided in the message
Check details carefully, as small errors or changes may indicate fraud
Never share passwords, banking details, CVVs or OTPs with anyone
Enable your inContact SMS notifications to receive an alert for each transaction on your account
Review your bank statements regularly for unknown or recurring debit orders
Never click on links or share your banking details where required to do so