Business E-mail Compromise (BEC) is a type of cybercrime where attackers impersonate a legitimate person to deceive employees into transferring funds, sensitive information, or access credential. This document reviews common tactics attackers use, practical steps to protecting your organization, and what to do when BEC occurs.