BEC scams are multi-layered attacks that begin by conducting reconnaissance to identify appropriate targets. After the initial reconnaissance, attackers choose how they’re going to dupe victims into believing that their fraudulent emails are coming from a legitimate source. Piggybacking off the trust that targets have in these business email accounts, the attacker then crafts a spear-phishing email and creates a sense of urgency regarding their request for money or sensitive information.