Business Email Compromise via Stolen Credentials

How Business Email Compromise via Stolen Credentials Works

Overview: Business Email Compromise (BEC) frauds have surged in India, exploiting email accounts hijacked via advanced phishing kits. Scammers gain access to a company’s official email accounts, then trick employees or clients into approving fake payment requests, causing sizeable financial damage. Indian SMEs and corporates are at high risk due to widespread use of cloud services and frequent vendor/client payments. How It Works: Attackers first use phishing links to steal email credentials—often via device code or AiTM attacks. Once inside, they monitor confidential email threads, wait for invoice or payment conversations, and then initiate fraudulent messages (invoice changes, fake payment instructions, or requests to update account details). Payments are often rerouted to foreign-controlled accounts or money mule intermediaries. India Angle: Indian IT, trading, and manufacturing firms are falling prey, especially in Mumbai, Chennai, and Pune. Scammers often time attacks around financial quarter ends and use perfect English or local language for trust-building. Large deals and imports/exports are high-risk. Real Examples: - An accounts manager in a Pune tech firm receives a genuine-looking email: “Vendor account updated. New payment details attached.” - A foreign supplier emails: “Bank details changed due to audit. Please pay upcoming invoice at new account.” Red Flags: - Sudden changes to regular payment account details - High-value transaction requests on email chains - Slight mismatch in sender’s email ID (extra letters, swapped letters) - Rush to make payments before confirmation via phone Protective Measures: - Always verify payment detail changes through a call or physical meeting - Train staff to spot odd email address[ADDRESS_REDACTED] - Use multi-factor authentication for all email accounts - Monitor large payment requests for timing/anomalies If Victimised: - Alert your bank to try to freeze the fund transfer - Inform company management and IT immediately - Report at cybercrime.gov.in, 1930, and inform RBI if needed Related Scams: - Payroll diversion via hacked email - Fake supplier onboarding - Vendor payment social engineering

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Business Email Compromise via Stolen Credentials Target?

General public across India

Red Flags — How to Identify Business Email Compromise via Stolen Credentials

• Last-minute bank account detail changes
• Email address[ADDRESS_REDACTED]
• Urgent payment requests by email only
• Requests not verified by a call

What To Do If You Encounter Business Email Compromise via Stolen Credentials

1. Do not click any links or share personal information
2. Block and report the sender immediately
3. Report at cybercrime.gov.in or call 1930
4. Inform your bank if financial details were shared

How to Report Business Email Compromise via Stolen Credentials in India

• Call 1930 — National Cyber Crime Helpline (24x7)
• File a complaint at cybercrime.gov.in
• Contact your bank immediately if money was lost
• Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What is Business Email Compromise via Stolen Credentials?

Overview: Business Email Compromise (BEC) frauds have surged in India, exploiting email accounts hijacked via advanced phishing kits. Scammers gain access to a company’s official email accounts, then trick employees or clients into approving fake payment requests, causing sizeable financial damage. Indian SMEs and corporates are at high risk due to widespread use of cloud services and frequent vendor/client payments. How It Works: Attackers first use phishing links to steal email credentials—of

How does Business Email Compromise via Stolen Credentials work?

Overview: Business Email Compromise (BEC) frauds have surged in India, exploiting email accounts hijacked via advanced phishing kits. Scammers gain access to a company’s official email accounts, then trick employees or clients into approving fake payment requests, causing sizeable financial damage. Indian SMEs and corporates are at high risk due to widespread use of cloud services and frequent ven

How to protect yourself from Business Email Compromise via Stolen Credentials?

Do not click any links or share personal information Block and report the sender immediately Report at cybercrime.gov.in or call 1930 Inform your bank if financial details were shared

How to report Business Email Compromise via Stolen Credentials in India?

Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.