Business Email Compromise (BEC) via Domain Spoofing

How Business Email Compromise (BEC) via Domain Spoofing Works

Overview Business Email Compromise (BEC) via Domain Spoofing is a growing concern for Indian corporates. Scammers create fake email domains that closely resemble genuine company address[ADDRESS_REDACTED]al information, resulting in significant financial loss. How It Works Attackers register fake domains (e.g., "[UPI_REDACTED].com" instead of "[UPI_REDACTED].com") and send emails imitating company leaders. These might include payment requests, confidential data asks, or attachment with malware. When employees respond, funds or data end up with the scammer. India Angle Indian SMEs and listed firms are prime targets due to the rising adoption of email-based approval for payments, especially in Delhi, Ahmedabad, Hyderabad, and Pune. Cybercriminals often exploit festival rush or peak business activity. Real Examples - "[UPI_REDACTED].co.in": "Please send invoice clearance payments by EOD." - "[UPI_REDACTED].co": "Confidential request: Share this month’s employee PF records." Red Flags - Email from domains with extra or missing letters or hyphens - Lack of corporate email signatures or details - Requests for confidential business or staff info - Attachments with poor file naming or unexpected content Protective Measures - Thoroughly check email sender address [ADDRESS_REDACTED] - Use email authentication protocols (SPF, DKIM, DMARC) - Report any suspicious email to IT/security team - Regularly train staff to spot domain lookalikes If Victimised - Contact your financial partner/bank to stop transactions - Submit a complaint at cybercrime.gov.in - Call 1930 for further guidance Related Scams - Email malware attachment fraud - Phishing impersonating regulatory authorities - Vendor invoice BEC

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Business Email Compromise (BEC) via Domain Spoofing Target?

General public across India

Red Flags — How to Identify Business Email Compromise (BEC) via Domain Spoofing

• Emails from address[ADDRESS_REDACTED]
• Payment or info requests bypassing normal process
• Lack of company branding or signature
• Unexplained urgency especially during busy periods

What To Do If You Encounter Business Email Compromise (BEC) via Domain Spoofing

1. Do not click any links or share personal information
2. Block and report the sender immediately
3. Report at cybercrime.gov.in or call 1930
4. Inform your bank if financial details were shared

How to Report Business Email Compromise (BEC) via Domain Spoofing in India

• Call 1930 — National Cyber Crime Helpline (24x7)
• File a complaint at cybercrime.gov.in
• Contact your bank immediately if money was lost
• Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What is Business Email Compromise (BEC) via Domain Spoofing?

Overview Business Email Compromise (BEC) via Domain Spoofing is a growing concern for Indian corporates. Scammers create fake email domains that closely resemble genuine company address[ADDRESS_REDACTED]al information, resulting in significant financial loss. How It Works Attackers register fake domains (e.g., "[UPI_REDACTED].com" instead of "[UPI_REDACTED].com") and send emails imitating company leaders. These might include payment requests, confidential data asks, or attachment with malware.

How does Business Email Compromise (BEC) via Domain Spoofing work?

Overview Business Email Compromise (BEC) via Domain Spoofing is a growing concern for Indian corporates. Scammers create fake email domains that closely resemble genuine company address[ADDRESS_REDACTED]al information, resulting in significant financial loss. How It Works Attackers register fake domains (e.g., "[UPI_REDACTED].com" instead of "[UPI_REDACTED].com") and send emails imitating company

How to protect yourself from Business Email Compromise (BEC) via Domain Spoofing?

Do not click any links or share personal information Block and report the sender immediately Report at cybercrime.gov.in or call 1930 Inform your bank if financial details were shared

How to report Business Email Compromise (BEC) via Domain Spoofing in India?

Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.