Business email compromise (BEC), also known as CEO fraud, is when an attacker pretends to be someone they aren’t on email, typically a company executive or senior manager, to convince an employee to divert funds into a bank account controlled by the attacker or to trick them into sharing sensitive data with the attacker. These types of payroll diversion scams accounted for $8 million in fraud losses in 2019.