Data And Cyber School: Beware Of Business Email Compromise

Estimated to result in worldwide losses in the millions every year, invoice fraud and business email compromise are scams which should now be identified in every cyber security risk register. The key legal problem arising from such scams is: who bears the responsibility when an email address is hacked and money is unwittingly sent to a fraudster?

In the fifth instalment of our 'data and cyber school series', we explore the current legal position, offering tips on how to limit the chances of falling victim to these email compromise scams.

What is business email compromise?

Business email compromise is a form of cybercrime where a threat actor intercepts and/or impersonates the legitimate email address of a business. The aim is to trick someone into sending money to a fraudulent account or divulging confidential and/or sensitive data and information. Hackers can gain access to an email address via phishing links or obtaining passwords. This allows them to