Interpersonal Attacks & CEO Fraud

One of the most dangerous interpersonal attacks is CEO Fraud, also known as Business Email Compromise (BEC). In this scam, attackers impersonate a company executive—often the CEO or CFO—and trick employees into transferring money or sharing sensitive information.

How It Works:

• Attackers spoof or compromise an executive’s email account.
• They send urgent, confidential requests to employees (usually in finance or HR).
• The message often pressures the recipient to act quickly without verification.

Example:
“Please process a wire transfer of $50,000 to this vendor immediately. This is confidential and time-sensitive.”

Why It Works

• Authority Bias: Employees trust instructions from senior executives.
• Urgency: Attackers create a sense of emergency to bypass normal checks.
• Isolation: Requests often discourage discussion with others.

How to Prevent CEO Fraud

1. Verify Requests via Secondary Channels
   Always confirm financial or sensitive requests through a phone call or in-person conversation.

2. Enable Multi-Factor Authentication (MFA)
   Protect executive email accounts with MFA to reduce the risk of compromise.

3. Implement Payment Approval Policies
   Require dual authorization for large transfers or changes in vendor details.

4. Train Employees on Social Engineering
   Regularly educate staff on spotting red flags like urgency, secrecy, and unusual payment instructions.

5. Use Email Security Tools
   Deploy anti-spoofing measures like SPF, DKIM, and DMARC to prevent email impersonation.

Remember: Cybersecurity is not just about technology—it’s about people. Awareness and verification are your best defenses.